The Firewall Module should get the ability to reorder the Networks. This Order also needs to be reflected to the IPTables Rules.
Reason: IPTables uses a top to bottom first match wins strategy within a chain and you may want to have different Zones attached to a Network and its Sub-Networks.