The firewalld segregates incoming traffic into zones. Each zone is a collection of rules. To select which zone is to be used for an incoming connection, firewalld uses the following three rules to match in the given order:
- The source address on the incoming packet is matched with the source address rule configured for the zone. If the source address matches, the packet is routed through that zone.
- If the source address does not match, then the incoming interface for a packet is matched with the interface set up for the zone and that zone is used.
- If neither the incoming interface of the packet nor the source address of a packet matches, then the rules given in the default zone are applied on that packet. The default zone ...