I installed Shorewall. I have

Zones:
net Net Internet
loc Local Local networks
dmz DMZ Demilitarized zone


Interfaces:
loc eth0 detect dhcp


Policies:
loc net ACCEPT
dmz net ACCEPT
net all DROP info
#
# THE FOLLOWING POLICY MUST BE LAST
#
all all REJECT info


Shouldn't this be sufficient to allow me to browse the web, check mail, etc? (eth0 is in loc; loc can go out to the net; etc). However, when shorewall is started, I am blocked from the internet.

My guess is that this is because net isn't defined; when I run shorewall check, I get (partial transcript):

Determining Hosts in Zones...
Warning: Zone net is empty
Local Zone: eth0:0.0.0.0/0
Warning: Zone dmz is empty


Any ideas? Thanks!

If you are using shorewall on mandrake 10 you can configure it rather easily from the GUI...
go to start menu>configure system>security

if you dont have the GUI then I would suggest getting webmin... http://webmin.com ...webmin is an awesome tool for managing most aspects you computer from a browser, there is a shorewall module included with it.

linux_terror

Hello, I don't have the Mandrake gui, but I did use Webmin to set it up. Agreed that it is a great configuration tool. According to Webmin, the configuration is fine. Thanks