On Sun, 26 Jun 2016 20:51:11 -0400 Sam Varshavchik wrote:
This host is using masquerading, with firewalld. I suspect that this is firewalld's doing.
Well, if you suspect firewalld, the simplest solution is to mask every service that shows up with firewalld in the name in a:
systemctl list-unit-files --full
and enable iptable and ip6tables and go back to doing things the old fashioned (and documented :-) way.