I use firewalld. When I create some rules from terminal (for example: firewall-cmd --permanent --add-rich-rule='rule family="ipv4" source address="1.2.3.4" port protocol="tcp" port="6565" accept') the SYS Firewall plugin is not updated with the new rule and public.xml is updated normally. I try firewall-cmd --reload, systemctl restart firewalld, restart bt). Any ideas? Centos 7.