The is nothing fatal issue in fwall now. All that remains is more and more tunnels.
But two small, puzzling clouds remained on the horizon.
After using the latest version for several days, two CLOSE-wait connections born.
[root@dti-vps-srv49 ~]# ss | grep -i close
tcp CLOSE-WAIT 0 0 ::ffff:59.157.4.42:https ::ffff:114.245.42.6:52516
tcp CLOSE-WAIT 0 0 ::ffff:59.157.4.42:https ::ffff:114.245.42.6:52516

However the 114.245.42.6 is China Union, beijing branch 's IP. It means there is still somewhere, server side forget close the connection.