The complexity FirewallD brings just doesn't pay off in features, especially when you come to configuration management. There's no way to flush it from the CLI and start over without doing very heavy rm -rf on config files and restarting - sorry lennart, *reloading* - the service. I used to like it until I had to deal with all these bespoke configs and it just fucking breaks.