You have to assign, for the vlans, the sub-interfaces (ethX.Y) to the zones, not the physical interfaces .
Sorry, didn't read before about the default policy 'accept ' ...... why accept ?
Cheers,
jonatha
Sorry, didn't read before about the default policy 'accept ' ...... why accept ?
Cheers,
jonatha