Zone definition

To setup a zone, several parameters are required in order to identify the zone. The parameters are all on simple form, and are listed below.

NAME

This identifies the name of the zone. The name must be unique, and must be identical to the name as specified in the global configuration file.

Example: NAME=EXT

DEV

This parameter specifies the network interface to which the zone is connected.

Example: DEV=eth0

DYNAMIC

If the interface as specified by the DEV parameter obtains its ip address from a dhcp server, or can have its ip address changed dynamically, DYNAMIC must be enabled.

Example: DYNAMIC=0

DHCP_SERVER

To specify that the firewall also acts as a dhcp server, this parameter should be set to one, in order for dhcp queries to be accepted from machines in the current zone.

Example: DHCP_SERVER=1

GLOBAL

The global parameter specifies if the interface connects the firewall to the Internet. If the interface does connect the firewall to the Internet then global should be set to one.

Example: GLOBAL=1

The following parameters are only required if the zone is specified as non-dynamic, that is DYNAMIC=0.

IP

The IP should be set the primary ip of the interface of the current zone.

Example: IP=1.2.3.4

NET

Specifies the address of the network to which this zone is connected.

Example: IP=1.2.3.2

MASK

Specifies the network mask of the address in dotted notation.

Example: IP=255.255.255.252

BCAST

Specifies the broadcast address of the network for this zone.

Example: IP=1.2.3.6