Block all traffic except some ports

The green interface is firewalled too, but for some reasons (for example VPN) you need the red interface

The roles of “colours” are described here

http://docs.nethserver.org/projects/nethserver-devel/en/v7/nethserver-firewall-base.html#roles-and-zones

for a description.