This may also be highlighting an incorrect interaction with default firewalld out of box as that also affects forwarding behaviour.