On 11/18/19 6:27 AM, Patrick O'Callaghan wrote:
I've never heard of nftables. I assumed that iptables was the backend.
Yes, firewalld uses iptables.
nftables is a different animal. nftables.service is disabled by default. See /etc/sysconfig/nftables.conf for "hints"