On Tue, May 12, 2020 at 12:56 PM Jonathan Billings <billings@negate.org> wrote:

On Tue, May 12, 2020 at 12:32:29PM -0500, Richard Shaw wrote:
> Using ipsets in FirewallD is broken in F32...
>
> Filed:
> https://bugzilla.redhat.com/show_bug.cgi?id=1834853

Is this because of the backend change to nftables? Can you change
FirewallBackend=iptables in /etc/firewalld/firewalld.conf?

<sigh> Yes that appears to be the problem but firewalld certainly doesn't handle the problem gracefully.

Thanks,

Richard