I wrote a tutorial on this. Zorin Connect comes with ready-made firewall rules, and not just for Zorin connect: