Firewalld UI is so odd and complicated. Seems like there is no way to express whats needed. Direct rules were a saving grace, working around all these...