shorewall_code/Samples/three-interfaces/zones

#
# Shorewall version 2.6 - Zones File
#
# /etc/shorewall/zones
#
#	This file determines your network zones.
#
# Columns are:
#
#	ZONE	Short name of the zone (5 Characters or less in length).
#		The names "all" and "none" are reserved and may not be
#		used as zone names.
#
#	IPSEC	Yes --	Communication with all zone hosts is encrypted
#	ONLY		Your kernel and iptables must include policy
#			match support.
#		No  --	Communication with some zone hosts may be encrypted.
#			Encrypted hosts are designated using the 'ipsec'
#			option in /etc/shorewall/hosts.
#
#	OPTIONS,	A comma-separated list of options as follows:
#	IN OPTIONS,
#	OUT OPTIONS	reqid=<number> where <number> is specified
#			using setkey(8) using the 'unique:<number>
#			option for the SPD level.
#
#			spi=<number> where <number> is the SPI of
#			the SA used to encrypt/decrypt packets.
#
#			proto=ah|esp|ipcomp
#
#			mss=<number> (sets the MSS field in TCP packets)
#
#			mode=transport|tunnel
#
#			tunnel-src=<address>[/<mask>] (only
#			available with mode=tunnel)
#
#			tunnel-dst=<address>[/<mask>] (only
#			available with mode=tunnel)
#
#			strict	Means that packets must match all rules.
#
#			next	Separates rules; can only be used with
#				strict..
#
#		Example:
#			mode=transport,reqid=44
#
#	The options in the OPTIONS column are applied to both incoming
#	and outgoing traffic. The IN OPTIONS are applied to incoming
#	traffic (in addition to OPTIONS) and the OUT OPTIONS are
#	applied to outgoing traffic.
#
#	If you wish to leave a column empty but need to make an entry
#	in a following column, use "-".
#
# THE ORDER OF THE ENTRIES IN THIS FILE IS IMPORTANT IF YOU HAVE NESTED OR
# OVERLAPPING ZONES DEFINED THROUGH /etc/shorewall/hosts.
#
# See http://www.shorewall.net/Documentation.htm#Nested
#------------------------------------------------------------------------------
# Example zones:
#
#	You have a three interface firewall with internet, local and DMZ
#	interfaces.
#
#	#ZONE	IPSEC	OPTIONS		IN			OUT	
#	net	
#	loc
#	dmz
#
###############################################################################
#ZONE	IPSEC	OPTIONS			IN			OUT
#	ONLY				OPTIONS			OPTIONS
net
loc
dmz
#LAST LINE - ADD YOUR ENTRIES ABOVE THIS ONE - DO NOT REMOVE