Shorewall

Do you wish to set up a Linux system as a firewall for a small network? Shorewall helps us to configure an enterprise-level firewall via standard Shorewall tools.

Shorewall is actually built upon Iptables. However, Shorewall makes it easier to configure the things.

Getting ready

A Linux system with two network cards installed and working is needed to configure Shorewall. One card will be used as an external network interface and the second will be used as an internal network interface. In our example, we are using eth0 as the external, and eth1 as the internal interface.

Configure both cards as per the network configuration. Make sure that you are able to ping another system on the local network and also something on the external network, the Internet.

On this system, we will be installing the Shorewall package and then configuring it as per our requirements.

How to do it...

1. We begin by installing shorewall on our system using the apt-get command:

   

2. Once the installation is complete, try...