On Mar 22, 2017, at 7:56 PM, James Pifer <jep at obrien-pifer.com> wrote: > In a nutshell I've tried the following commands, in many different ways and orders, but when the system restarts it still seems to end up with some form of default rules. It even has a couple rules specifying 192.168.122.0 and I can't figure out where it's coming from. libvirtd? That network is the range it tends to use for routing private networking. Also, you should look into using ‘systemctl mask unitname’ to make it not run, rather than just deleting a symlink. -- Jonathan Billings <billings at negate.org>