Hi, for some reason when i have shorewall enabled i cant use the internet properly (basically if i try to connect to any sites i get a "host cannot be found" error)/

I disabled shorewall and everthing works fine. Now i need to re write the policy though and hope it works. If anyone could suggest a good policy I would appreciate it. This is the policy im using (its a default)

SOURCE DEST ACTION LOG
fw net ACCEPT
net all DROP info
all all REJECT info

Unfortunately though that doesnt seem to work for some reason and if i have shorewall activated with those settings nothing works. Could it be line 2 thats causing the problem? Dropping all incoming connections?

Thanks,
NNP

http://shorewall.sourceforge.net/sho...tart_guide.htm

excuse me, what is the reason?

Im not entirely sure. Basically I can dial into my isp fine but after that if i try to connect to a site i get a "host cannot be found" error as well as that I cant ping any sites etc.

Could it be the last two lines of my shorewall config that are doing that? To me it looks like they drop or reject every packet i recieve?

Thanks

http://shorewall.sourceforge.net/PPTP.htm#PPTP_ADSL

by the way, i recommend firestarter or fwbuilder it can handle cable and adsl both easy.

http://freshmeat.net/projects/firestarter/
http://freshmeat.net/browse/151/
http://www.fwbuilder.org/

i am too facing the exact same problem...getting connected to isp but can't browse sites.
most people suggest only allow the services/ports you need to. like maybe port 80 for web 110 for pop3 etc. but some software have their own ports and protocol, how does one find out...like for example the instant messaging clients. etc.

most guides are written for cable/adsl i.e. fixed ip connections.