I think there is a problem with creating rules for Mozilla programs (Firefox / Thunderbird) in interactive mode. When first starting the programs ESS presents a message indicating outbound traffic to the TRUSTED ZONE. If however I create a permanent rule, all outbound traffic, even to the INTERNET ZONE will be allowed. This is not what one should expect from the initial message, especially because the program asks explicitly about allowing THIS connection (i. e. to a computer in the local zone). IMHO this behaviour is quite misleading for the average user.