firewall not working

[root@tplinux ~]# systemctl status systemd-networkd.service
● systemd-networkd.service - Network Service
   Loaded: loaded (/usr/lib/systemd/system/systemd-networkd.service; enabled; vendor preset: disabled)
   Active: inactive (dead) since Sat 2016-02-27 14:52:57 EST; 12min ago
     Docs: man:systemd-networkd.service(8)
 Main PID: 2882 (code=exited, status=0/SUCCESS)
   Status: "Shutting down..."

Feb 27 14:52:27 tplinux.localdomain systemd[1]: Starting Network Service...
Feb 27 14:52:27 tplinux.localdomain systemd-networkd[2882]: [/etc/systemd/network/ens5.network:6] Prefix length is invalid, ignoring assignment: CIDR
Feb 27 14:52:27 tplinux.localdomain systemd-networkd[2882]: [/etc/systemd/network/ens5.network:7] Route is invalid, ignoring assignment: GATEWAY
Feb 27 14:52:27 tplinux.localdomain systemd-networkd[2882]: Enumeration completed
Feb 27 14:52:27 tplinux.localdomain systemd[1]: Started Network Service.
Feb 27 14:52:27 tplinux.localdomain systemd-networkd[2882]: ens5            : link configured
Feb 27 14:52:27 tplinux.localdomain systemd-networkd[2882]: enp0s25         : link configured


[root@tplinux ~]# systemctl status dnsmasq.service
● dnsmasq.service - DNS caching server.
   Loaded: loaded (/usr/lib/systemd/system/dnsmasq.service; enabled; vendor preset: disabled)
   Active: failed (Result: exit-code) since Sat 2016-02-27 15:02:42 EST; 2min 53s ago
  Process: 2989 ExecStart=/usr/sbin/dnsmasq -k (code=exited, status=5)
 Main PID: 2989 (code=exited, status=5)

Feb 27 15:02:42 tplinux.localdomain systemd[1]: Started DNS caching server..
Feb 27 15:02:42 tplinux.localdomain systemd[1]: Starting DNS caching server....
Feb 27 15:02:42 tplinux.localdomain dnsmasq[2989]: dnsmasq: failed to create inotify for /etc/resolv.conf: Permission denied
Feb 27 15:02:42 tplinux.localdomain systemd[1]: dnsmasq.service: main process exited, code=exited, status=5/NOTINSTALLED
Feb 27 15:02:42 tplinux.localdomain systemd[1]: Unit dnsmasq.service entered failed state.
Feb 27 15:02:42 tplinux.localdomain systemd[1]: dnsmasq.service failed.


[root@tplinux ~]# ls -l /etc/resolv.conf
lrwxrwxrwx. 1 root root 32 Sep 17 23:26 /etc/resolv.conf -> /run/systemd/resolve/resolv.conf


[root@tplinux ~]# ls -l /run/systemd/resolve/resolv.conf
-rw-r--r--. 1 systemd-resolve systemd-resolve 459 Feb 27 14:52 /run/systemd/resolve/resolv.conf


[root@tplinux ~]# cat /run/systemd/resolve/resolv.conf
# This file is managed by systemd-resolved(8). Do not edit.
#
# Third party programs must not access this file directly, but
# only through the symlink at /etc/resolv.conf. To manage
# resolv.conf(5) in a different way, replace the symlink by a
# static file or a different symlink.

nameserver 2001:4860:4860::8888
nameserver 2001:4860:4860::8844
nameserver 8.8.8.8
# Too many DNS servers configured, the following entries may be ignored.
nameserver 8.8.4.4


[root@tplinux ~]# cat /etc/systemd/network/ens5.network
# Cardbus adapter for public connection
[Match]
Name=ens5

[Network]
Address=PUBLIC_IP_ADDRESS/CIDR
Gateway=GATEWAY
IPForward=yes