Thanks for the detailed clarifications. This helps a lot!
The firewalld paradigm is different than I'm used to, but that's not necessarily a
bad thing as long as I understand what it's doing.
Per your suggestion, I may use --direct rules for now. I certainly look forward to the
future enhancements.
Best regards,
Eric