Firewall question

[Chris Mohler]

On Fri, Nov 21, 2008 at 9:43 PM, Linda <haniganwork at earthlink.net> wrote:
> I decided to setup a firewall the easy way with shorewall. The Firewall
> is working well it forwards all the network traffic great and I ran some
> portscans etc and everything behind the firewall is invisible. However I
> have one small problem. The firewall itself can't connect to the
> internet for apt-get. Any suggestions on what I need to allow the
> firewall machine to do updates?
>          Thanks
>           Linda

Either set up a default policy to allow the FW zone access to the NET
zone (or whatever you named it), or set up rules to allow the FW zone
to connect to specific ports/services in the NET zone.

Some claim that Webmin (un Ubuntu) is evil, yet I find that the
Shorewall module is quite pleasant to work with and makes setting up
shorewall a breeze- YMMV.

Chris