[root@swaggserver-01 daniel]# systemctl status firewalld
● firewalld.service - firewalld - dynamic firewall daemon
   Loaded: loaded (/usr/lib/systemd/system/firewalld.service; enabled; vendor preset: enabled)
   Active: active (running) since Thu 2019-05-16 08:45:35 EDT; 3 weeks 4 days ago
     Docs: man:firewalld(1)
 Main PID: 4958 (firewalld)
    Tasks: 2
   Memory: 26.5M
   CGroup: /system.slice/firewalld.service
           └─4958 /usr/bin/python -Es /usr/sbin/firewalld --nofork --nopid

May 16 08:45:57 swaggserver-01 firewalld[4958]: WARNING: COMMAND_FAILED: '/usr/sbin/iptables -w2 -D FORWARD -i docker0 -o docker0 -j DROP' ...chain?).
May 16 08:45:57 swaggserver-01 firewalld[4958]: WARNING: COMMAND_FAILED: '/usr/sbin/iptables -w2 -t filter -C FORWARD -i docker0 -o docker0...chain?).
May 16 08:45:57 swaggserver-01 firewalld[4958]: WARNING: COMMAND_FAILED: '/usr/sbin/iptables -w2 -t filter -C FORWARD -i docker0 ! -o docke...chain?).
May 16 08:45:57 swaggserver-01 firewalld[4958]: WARNING: COMMAND_FAILED: '/usr/sbin/iptables -w2 -t filter -C FORWARD -o docker0 -j DOCKER'...at name.
May 16 08:45:57 swaggserver-01 firewalld[4958]: WARNING: COMMAND_FAILED: '/usr/sbin/iptables -w2 -t filter -C FORWARD -o docker0 -m conntra...chain?).
May 16 08:45:57 swaggserver-01 firewalld[4958]: WARNING: COMMAND_FAILED: '/usr/sbin/iptables -w2 -t filter -C DOCKER-ISOLATION-STAGE-1 -i d...at name.
May 16 08:45:57 swaggserver-01 firewalld[4958]: WARNING: COMMAND_FAILED: '/usr/sbin/iptables -w2 -t filter -C DOCKER-ISOLATION-STAGE-2 -o d...chain?).
May 16 08:45:57 swaggserver-01 firewalld[4958]: WARNING: COMMAND_FAILED: '/usr/sbin/iptables -w2 -t filter -n -L DOCKER-USER' failed: iptab...at name.
May 16 08:45:57 swaggserver-01 firewalld[4958]: WARNING: COMMAND_FAILED: '/usr/sbin/iptables -w2 -t filter -C DOCKER-USER -j RETURN' failed...chain?).
May 16 08:45:57 swaggserver-01 firewalld[4958]: WARNING: COMMAND_FAILED: '/usr/sbin/iptables -w2 -t filter -C FORWARD -j DOCKER-USER' faile...at name.
Hint: Some lines were ellipsized, use -l to show in full.
[root@swaggserver-01 daniel]# firewall-cmd --list-all
You're performing an operation over default zone ('public'),
but your connections/interfaces are in zone 'dmz,internal' (see --get-active-zones)
You most likely need to use --zone=dmz option.

public
  target: default
  icmp-block-inversion: no
  interfaces:
  sources:
  services: ssh dhcpv6-client
  ports:
  protocols:
  masquerade: no
  forward-ports:
  source-ports:
  icmp-blocks:
  rich rules:

[root@swaggserver-01 daniel]# firewall-cmd --get-default-zone
public
[root@swaggserver-01 daniel]# firewall-cmd --list-all --zone=public
public
  target: default
  icmp-block-inversion: no
  interfaces:
  sources:
  services: ssh dhcpv6-client
  ports:
  protocols:
  masquerade: no
  forward-ports:
  source-ports:
  icmp-blocks:
  rich rules: