| Block |
Incoming network connections are rejected with an “icmp-host-prohibited” message. Only network connections that were initiated on this system are allowed. |
| Dmz |
For use on computers in the demilitarized zone. Only selected incoming connections are accepted, and limited access to the internal network is allowed. |
| Drop |
Any incoming packets are dropped and there is no reply. |
| External |
For use on external networks with masquerading (Network Address Translation [NAT]) enabled, used especially on routers. Only selected incoming connections are accepted. |
| Home |
For use with home networks. Most computers on the same network are trusted, and only selected incoming connections are accepted. |
| Internal |
For use in internal networks. Most computers on the same network are trusted, and only selected incoming connections are accepted. |
| Public |
For use in public areas. Other computers in the same network are not trusted, and limited connections are accepted. This is the default zone for all newly created network interfaces. |
| trusted |
All network connections are accepted. |
| work |
For use in work areas. Most computers on the same network are trusted,and only selected incoming connections are accepted. |
