This section defines common properties of "wan". The input and output options set the default policies for traffic entering and leaving this zone while the forward option describes the policy for forwarded traffic between different networks within the zone. Covered networks specifies which available networks are member of this zone.

The options below control the forwarding policies between this zone (wan) and other zones. Destination zones cover forwarded traffic originating from "wan". Source zones match forwarded traffic from other zones targeted at "wan". The forwarding rule is unidirectional, e.g. a forward from lan to wan does not imply a permission to forward from wan to lan as well.