Question about zones

Hello,

So I've installed Fedora 18 and with it Firewalld. One thing I haven't figured out is this. I'm wondering how 'smart' the zones are. For example, the internal zone. Does it open those services to ANY request or just to requests coming from an internal source? For example I have a system that is behind a router/firewall. I'd like it to allow all ssh connections. But some other services I'd like accepted only if they are on the same subnet etc... Is that how firewalld works already? If not how do I do this?

---------------------------------------------------------------- This message was sent using IMP, the Internet Messaging Program.