My network address is My host machine is and my client machine is How will I enable my client to ping the internet through the terminal but restrict it from accesing port 80 or the browser? Below is my /etc/shorewall/policy file :


loc       net     ACCEPT

net       all     DROP      info

/etc/shorewall/rules file:

DROP    loc    fw    tcp   80

/etc/shorewall/interfaces file :

net   eth0
loc   eth1

Host Interfaces:

eth0 - Connection to the internet
eth1 - Local Network Connection

This question has an open bounty worth +50 reputation from Eliyah ending in 5 days.

This question has not received enough attention.

Any help would be very much appreciated.


Blocking the browser is different than blocking ports. You can't block applications with shorewall. You could uninstall browsers from the system.

If you just want to block webpage traffic You will need to block more than just port 80

DROP    -    -    tcp   80,443,8080,8443,8008

NOTE: This will not stop crafy users who can configure a proxy or connect to other non-standard ports.

Ideally you would want to block all HTTP(s) traffic regardless of port. That could be done with a network security device that can handle protocol detection.

Your Answer

By clicking "Post Your Answer", you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.