Zones configurationΒΆ
Zones are just names referring to source of traffic from the perspective of the firewall. When an interface is attached to a zone, it allows filtering traffic based on whether the traffic is coming from, or destined to the given zone. Zone-based rules are easier to manage and understand from the administrators perspective.
To use a zone in your rules must first be defined, with the
exception of fw which always refers to the machine running the firewall
and does not need to be listed in the zones configuration.
A simple example zone configuration defining a single zone called lan:
---
lan:
Multiple zones can be defined like so:
---
lan:
iot:
Zones do not have any options at this time, so it is sufficient just to define their names.
After defining your zones, you should attach the interfaces to them.