This bug is a regression on the situation in Debian 9 (where firewalld works with the same monolithic kernel). I also tested and this is still a problem in the version currently in testing and unstable (0.7.2-1). Thanks, Alex