@matigo What used to be a simple config file in RHEL6 for iptables is a mess in firewalld. Had to delete and re-create a network interface to solve the problem. Even though it's mac and uuid were unchanged, firewalld lost it and I had to use their crappy GUI tool.
Fortunately, that box is slated to be replaced with a pfSense router when I find the time.