Migrated JAILs from TrueNAS 11.3 to JAILS over FreeBSD 13 with VNET and now IPFW inside JAIL not work: kldload ipfw - not permitted

Question

In jail under TrueNAS 11, was mail server that can block IPs by IPFW rules. Now I move JAIL to FreeBSD 13.1, and detect that same JAIL with same settings, not allow to load IPFW inside jail.

kldload ipfw
kldload: can't load ipfw: Operation not permitted 

For JAILs managemnt use iocage

"allow_raw_sockets": 1,
"vnet": 1,
"dhcp": 1,
"bpf": 1

How now block bad users by analyze with Fail2BAN mail log. Do it outside of JAIL ? Or can allow run IPFW inside of jail ?