My network address is 192.168.5.0
. My host machine is 192.168.5.1
and my client machine is 192.168.5.2
. Currently, my client is unable to use the internet browser and even ping the internet. The client can ping the host machine in the local network.
How will I enable my client to ping the internet through a terminal and restrict it to use the browser or port 80 using Shorewall? Below are my configuration files:
/etc/shorewall/interfaces file:
#ZONE INTERFACE
net eth0
loc eth1
The eth0 interface is the one connected to the internet while eth1 is connected to the local network.
/etc/shorewall/zones file:
#ZONE TYPE
fw firewall
net ipv4
loc ipv4
/etc/shorewall/policy file:
#SOURCE DEST POLICY LOGLEVEL
loc net ACCEPT
net all DROP $LOG_LEVEL
all all REJECT $LOG_LEVEL
/etc/shorewall/rules file:
?SECTION ALL
?SECTION ESTABLISHED
?SECTION RELATED
?SECTION INVALID
?SECTION UNTRACKED
?SECTION NEW
DNS(ACCEPT) $FW net
SSH(ACCEPT) loc $FW
PING(ACCEPT) loc $FW
PING(DROP) net $FW
ACCEPT $FW loc icmp
ACCEPT $FW net icmp
Any help would be very much appreciated.