Even after years, Firewall integration in non-CentOS environments is very bad!
I'm using the latest version [7.0.7] and among so many errors with the Firewall, I discovered that, if I create TCP/UDP rules together, the firewall ignores it, creates nothing, and even disables the Firewall.
It is necessary to create separate rules for TCP and another for UDP.
It is very important to have the Firewall service working 100% correctly, please review and add other protocols, for example ICMP... Including the possibility of [ALL], to have all types of protocols in a single release rule /block