OK I'm trying firewalld. But I used to have this rule in iptables: -A INPUT -i tun+ -j ACCEPT How do I add such a rule with firewalld?