[Bug 989145] document firewall behaviour for "no zone assigned"