# Zones configuration

Zones are just names referring to source of traffic from the perspective of
the firewall. When an interface is attached to a zone, it allows filtering
traffic based on whether the traffic is coming from, or destined to the
given zone. Zone-based rules are easier to manage and understand from the
administrators perspective.

To use a zone in your rules must first be defined, with the
exception of ```fw``` which always refers to the machine running the firewall
and does not need to be listed in the zones configuration.

A simple example zone configuration defining a single zone called ```lan```:

```yaml
---
lan:
```

Multiple zones can be defined like so:

```yaml
---
lan:
iot:
```

Zones do not have any options at this time, so it is sufficient just to define
their names.

After defining your zones, you should attach the [interfaces](interfaces.md) to them.