Раздача интернета через shorewall

[Worldshade]

Прочитал много инфы, но кажется я топчусь на месте, но так и не могу настроить раздачу интернета через shorewall.

/etc/network/interfaces

(Нажмите, чтобы показать/скрыть)

iface lo inet loopback

# The primary network interface

auto enp1s10
iface enp1s10 inet static
address 192.168.1.44
netmask 255.255.255.0
network 192.168..0
broadcast 192.168.1.255
dns-nameserver 192.168.1.200
dns-search DON

auto enp4s0
iface enp4s0 inet static
address 192.168.1.1
netmask 255.255.255.0
network 192.168.2.0
broadcast 192.168.2.255




auto dsl-provider
iface dsl-provider inet ppp
pre-up /bin/ip link set enp4s0 up # line maintained by pppoeconf
provider dsl-provider

Настройки Shorewall

/etc/shorewall/interfaces

(Нажмите, чтобы показать/скрыть)

#
# Shorewall - Sample Interfaces File for two-interface configuration.
# Copyright (C) 2006-2015 by the Shorewall Team
#
# This library is free software; you can redistribute it and/or
# modify it under the terms of the GNU Lesser General Public
# License as published by the Free Software Foundation; either
# version 2.1 of the License, or (at your option) any later version.
#
# See the file README.txt for further details.
#------------------------------------------------------------------------------
# For information about entries in this file, type "man shorewall-interfaces"
###############################################################################
?FORMAT 2
###############################################################################
#ZONE<->INTERFACE<----->OPTIONS
net     ppp0            tcpflags,nosmurfs,routefilter,logmartians,sourceroute=0
loc     enp1s10         tcpflags,nosmurfs,routefilter,logmartians

/etc/shorewall/masq

(Нажмите, чтобы показать/скрыть)

#
# Shorewall - Sample Masq file for two-interface configuration.
# Copyright (C) 2006-2015 by the Shorewall Team
#
# This library is free software; you can redistribute it and/or
# modify it under the terms of the GNU Lesser General Public
# License as published by the Free Software Foundation; either
# version 2.1 of the License, or (at your option) any later version.
#
# See the file README.txt for further details.
#------------------------------------------------------------------------------
# For information about entries in this file, type "man shorewall-masq"
###################################################################################################
#INTERFACE:DEST><------>SOURCE<><------>ADDRESS><------>PROTO<->PORT(S)>IPSEC<->MARK<-->USER/<->SWI
#<-----><------><------><------><------><------><------><------><------><------><------>GROUP<-><->
ppp0<-->192.168.1.0/24 192.168.1.1

/etc/shorewall/policy

(Нажмите, чтобы показать/скрыть)

#
# Shorewall - Sample Policy File for two-interface configuration.
# Copyright (C) 2006-2015 by the Shorewall Team
#
# This library is free software; you can redistribute it and/or
# modify it under the terms of the GNU Lesser General Public
# License as published by the Free Software Foundation; either
# version 2.1 of the License, or (at your option) any later version.
#
# See the file README.txt for further details.
#------------------------------------------------------------------------------
# For information about entries in this file, type "man shorewall-policy"
###############################################################################
#SOURCE><------>DEST<--><------>POLICY<><------>LOG LEVEL<----->LIMIT:BURST

loc<---><------>net<---><------>ACCEPT
$FW<---><------>all<---><------>ACCEPT
net<---><------>all<---><------>DROP<--><------>info
# THE FOLLOWING POLICY MUST BE LAST
all<---><------>all<---><------>REJECT<><------>info

/etc/shorewall/rules

(Нажмите, чтобы показать/скрыть)

#
# Shorewall - Sample Rules File for two-interface configuration.
# Copyright (C) 2006-2015 by the Shorewall Team
#
# This library is free software; you can redistribute it and/or
# modify it under the terms of the GNU Lesser General Public
# License as published by the Free Software Foundation; either
# version 2.1 of the License, or (at your option) any later version.
#
# See the file README.txt for further details.
#------------------------------------------------------------------------------
# For information about entries in this file, type "man shorewall-rules"
##############################################################################################################################
#ACTION><------>SOURCE<><------>DEST<--><------>PROTO<->DEST<-->SOURCE<><------>ORIGINAL<------>RATE<--><------>USER/<->MARK<>
#<-----><------><------><------><------><------><------>PORT<-->PORT(S)><------>DEST<--><------>LIMIT<-><------>GROUP
?SECTION ALL
?SECTION ESTABLISHED
?SECTION RELATED
?SECTION INVALID
?SECTION UNTRACKED
?SECTION NEW

#       Don't allow connection pickup from the net
#
Invalid(DROP)<->net<---><------>all<---><------>tcp
#
#<----->Accept DNS connections from the firewall to the network
#
DNS(ACCEPT)<--->$FW<---><------>net
#
#<----->Accept SSH connections from the local network for administration
#
#SSH(ACCEPT)<-->loc<---><------>$FW
ACCEPT<><------>loc:192.168.1.20<------>$FW tcp 1:65535
ACCEPT<><------>loc:192.168.1.20<------>$FW udp 1:65535
ACCEPT<><------>loc:192.168.1.20<------>net tcp 1:65535
ACCEPT<><------>loc:192.168.1.20<------>net udp 1:65535
#
#<----->Allow Ping from the local network
#
Ping(ACCEPT)<-->loc<---><------>$FW

#
# Drop Ping from the "bad" net zone.. and prevent your log from being flooded..
#

Ping(DROP)<---->net<---><------>$FW

ACCEPT<><------>$FW<---><------>loc<---><------>icmp
ACCEPT<><------>$FW<---><------>net<---><------>icmp
#

/etc/shorewall/zones

(Нажмите, чтобы показать/скрыть)

#
# Shorewall - Sample Zones File for two-interface configuration.
# Copyright (C) 2006-2014 by the Shorewall Team
#
# This library is free software; you can redistribute it and/or
# modify it under the terms of the GNU Lesser General Public
# License as published by the Free Software Foundation; either
# version 2.1 of the License, or (at your option) any later version.
#
# See the file README.txt for further details.
#------------------------------------------------------------------------------
# For information about entries in this file, type "man shorewall-zones"
###############################################################################
#ZONE<->TYPE<-->OPTIONS><------><------>IN<----><------><------>OUT
#<-----><------><------><------><------>OPTIONS><------><------>OPTIONS
fw<---->firewall
net<--->ipv4
loc<--->ipv4

/etc/shorewall/shorewall.conf
поменял с IP_FORWARDING=Keep на IP_FORWARDING=On

/etc/sysctl.conf
раскомментировал net.ipv4.ip_forward=1

Помогите пожалуйста....
ТС не появлялся на Форуме более полугода по состоянию на 14/07/2019 (последняя явка: 24/01/2018). Модератором раздела принято решение закрыть тему.
--zg_nico