Skip to content

Commit 74ca1be

Browse files
committed
Fix language in leading paragraph + minor change
Signed-off-by: Joachim Wiberg <[email protected]>
1 parent c153bbd commit 74ca1be

File tree

1 file changed

+5
-6
lines changed

1 file changed

+5
-6
lines changed

_posts/2025-10-29-zone-based-firewall.md

Lines changed: 5 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -7,10 +7,9 @@ tags: [firewall, networking, security, zbf]
77
---
88

99
As of Infix v25.10, a zone-based firewall (ZBF) built on [firewalld][2]
10-
is included. Exposing the most relevant functionality for your network
11-
security. Rather than managing rules on a per-interface basis, zones
12-
group interfaces by trust level and policies control traffic flow
13-
between zones.
10+
is included, exposing the most relevant functionality for network security.
11+
Rather than managing rules on a per-interface basis, zones group interfaces
12+
by trust level and policies control traffic flow between zones.
1413

1514
![](/assets/img/fw-concept.svg){: #fig1 width="600" }
1615
_**Figure 1**: Zone-based firewall concept._
@@ -47,8 +46,8 @@ admin@router:/config/firewall/> set zone wan action drop
4746
admin@router:/config/firewall/> set zone wan interface eth1
4847
```
4948

50-
At this point, the LAN zone trusts all traffic to the host, while the WAN
51-
zone drops everything by default. However, we need to allow certain services
49+
At this point, the LAN zone allows all traffic to the host, while the WAN
50+
zone drops everything by default. However, we need to allow certain services
5251
from the WAN side, like DHCPv6 for address assignment:
5352

5453
```console

0 commit comments

Comments
 (0)