Best explained here
The TL:DR is
- shields-up - blocks all connection
- shields-down - allows connections defined in the zone
The default zone is public where my personal preference - on public networks is drop
1 Like