It seems setting a policy helped:
firewall-cmd --list-all-policies
firewall-cmd --permanent --new-policy=
firewall-cmd --permanent --policy= --add-ingress-zone=internal
firewall-cmd --permanent --policy= --add-egress-zone=external
firewall-cmd --permanent --policy= --set-target=ACCEPT
firewall-cmd --reload
firewall-cmd --list-all-policies
3 Likes