It’s not in the networks db, it’s only configured in shorewall.
Check /etc/shorewall/zones and /etc/shorewall/policy.
I used to change the policy with a custom template in the nxfilter/pihole howto thread to need no firewall rules for easy testing and because the aqua zone seems not selectable in both server managers.
It looks like it worked some time ago:
EDIT:
I couldn’t manage it via the GUI.
As a workaround you may copy the 65aqua fragment and add wanted firewall rules with a custom template.
mkdir -p /etc/e-smith/templates-custom/etc/shorewall/rules
cp /etc/e-smith/templates/etc/shorewall/rules/65aqua /etc/e-smith/templates-custom/etc/shorewall/rules/
Edit /etc/e-smith/templates-custom/etc/shorewall/rules/65aqua and edit/add your firewall rules.
To apply the config:
signal-event firewall-adjust