{ "description": "Base zones and policies", "zone": { "WAN": { "iface": [ "ppp0", "ppp1" ] }, "LAN": { "iface": [ "eth0", "eth1", "br0", "wg+" ] }, "Closed": { "iface": [ "ppp500", "ppp501", "ppp502", "ppp503" ] } }, "policy": [ { "in": "_fw", "out": "WAN", "action": "accept" }, { "in": "LAN", "action": "accept" }, { "out": "LAN", "action": "accept" }, { "in": "WAN", "action": "drop" }, { "in": "Closed", "action": "accept" } ], "snat": [ { "out": [ "WAN", "Closed" ] } ], "clamp-mss": [ { "out": [ "WAN", "Closed" ] } ] }