Nethserver Firewall

Hi Paul,

You didn’t misunderstand the docs.
NS is an AiO distro.
NS can act as AiO server but also, can act as UTM only, Email server only, PDC only, …

If you have only one hardware (machine) the AiO is the best choice.

You may use one eth for internet access (RED), one eth for DMZ (ORANGE), one eth for wireless clients (BLUE) and one eth for LAN (GREEN).

The interzones traffic is given (allowed or denied) by firewall rules.

It depends of what you want to do and how do you want to use it.

UPDATE

You may find some scenarios here: