It's just weird to install a new OS just to see loads of rules predefined. Why did these guys not stick to iptables as firewall? IPtables works just fine on wheezy. Looks like I must spend time looking at firewall-cmd to understand how to deal with those predefined rules.