To configure SHOREWALL
 

Hello!
I have a home desktop with LAN card onboard (eth0) and static IP address having the form a.b.c.68 (no proxy, no network anyway); the Broadcast address is normally related to this setting as a.b.c.255
Now, in order to prepare my shorewall configuration:
1) In what concerns the /etc/shorewall/interfaces file: May I unambigously set BROADCAST as "a.b.c.255" or shall I let "detect"? Please recall, my IP is static anyway, therefore a "dhcp" OPTION would be rather strange in my case! I'm asking simply because I didn't noticed any other pattern than "detect", in all tutorials and howtos I have consulted.
2) In my /etc/shorewall/rules I want to be allowed to "ping" and "traceroute". How to set these two rules?
Thanks!

Did u tried the configuration files ? Everything is explained here!
Download the sample files according to your shorewall version...fairly easy !
Shorewall configuration (sample files)

if still have problem then let know..

Thanks a lot!
Meanwhile I did configure and test my shorewall; it works very fine though following another way than the Debian proposal. However, you are right (endusers with a single net interface may simply let the package defaults). As for my former question, at that time I was not clear in my mind whether the "detect" choice should only apply to DHCP connection; in fact it doesn't.
Once again, shorewall is very good!
Grateful thanks!