Which Zone is good for a LAMP server?

Hello, Is below configuration good for a LAMP server? public (active) target: default icmp-block-inversion: no interfaces: ens192 sources: services: ssh ports: 80/tcp 443/tcp 990/tcp 40000-50000/tcp protocols: masquerade: no forward-ports: source-ports: icmp-blocks: rich rules: I want to configure Suricata-IDS as IPS mode but the Suricata-IDS document using iptables :(, Can anyone here help me about this goal? https://suricata.readthedocs.io/en/suricata-5.0.3/setting-up-ipsinline-fo... Thank you.