ZONING RESTRICTIONS

RED

Everything outside of IPFire’s control is placed in the red zone. Basically, this is its input, probably coming directly from the Internet. Every IPFire setup includes a red zone; if it didn’t, there would be no point in using IPFire at all.

GREEN

Your wired network is designated in the green zone. This area is for devices that fall under IPFire’s direct protection, meaning they’re subject to your firewall rules and other restrictions. It should, in theory, be a safe network.

ORANGE

An optional DMZ, or demilitarized zone. If you have servers you want to be web-accessible and excluded from certain network rules, put them in the orange zone.

BLUE

Wireless devices go here—but bear in mind that you need to use special wireless hardware, and explicitly allow any device that connects to the blue zone. It may be better, for home users, to fudge it on green.