zones

#ZONE	TYPE		OPTIONS		IN			OUT
#					OPTIONS			OPTIONS
fw					firewall
world		ipv4
net:world	bport
loc:world	bport
#LAST LINE - ADD YOUR ENTRIES ABOVE THIS ONE - DO NOT REMOVE

policy

#SOURCE		DEST		POLICY		LOG		LIMIT:BURST
#						LEVEL
loc         net         ACCEPT
net         all         DROP          info
all         all         REJECT        info
#LAST LINE -- DO NOT REMOVE

interfaces

#ZONE	INTERFACE	BROADCAST	OPTIONS
world    br0            detect          bridge
net      br0:eth0
loc      br0:eth1
#LAST LINE -- ADD YOUR ENTRIES BEFORE THIS ONE -- DO NOT REMOVE

teastep@gateway:~/bridge> /sbin/shorewall check .
Checking...
Shorewall configuration verified
teastep@gateway:~/bridge>