Sorry for not having followed up on this earlier. The issue is still that permanent _interface_ changes (for example `firewall-cmd --zone=public --remove-interface=eth0 --permanent && firewall-cmd --zone=internal --add-interface=eth0 --permanent) will not apply after either `firewall-cmd --reload` or `systemctl reload firewalld`. Only after `systemctl restart firewalld` the interface changes are reflected (as can be confirmed with `firewall-cmd --list-all-zones`). This is still an issue on 15.4. I originally wrongly declared it as a YaST issue.