Before firewalld I used to use ipsets to blacklist several countries. Firewalld added support for ipsets with version 0.4, a year ago. Centos 7.2 is still at 0.3.9. Anyone know of a newer Centos package?

jon