• Best Practices
• Configuration files
• Zone names
• localhost
• public
• home
• work
• internal
• dmz
• vpn
• GNOME
• Proxy ARP
• Hairpin NAT / NAT Loopback
• fail2ban
• Custom nftables chains
• QEMU/libvirt and vnet interfaces
• Don't route private networks to public internet
• Multi-ISP