Shorewall comes with many sample configuration files in the Samples/ subdirectory but, unlike the Debian or Fedora package, the Gentoo ebuild does not install them. Reproducible: Always Shorewall can do nothing without a configuration file, so, IMHO, installing the samples in /usr/share/doc is required.
betelgeuse@aria ~ $ qlist shorewall | grep -i samp /usr/share/doc/shorewall-3.0.8/Samples/three-interfaces/interfaces /usr/share/doc/shorewall-3.0.8/Samples/three-interfaces/masq /usr/share/doc/shorewall-3.0.8/Samples/three-interfaces/rules /usr/share/doc/shorewall-3.0.8/Samples/three-interfaces/zones /usr/share/doc/shorewall-3.0.8/Samples/three-interfaces/README.txt /usr/share/doc/shorewall-3.0.8/Samples/three-interfaces/policy /usr/share/doc/shorewall-3.0.8/Samples/three-interfaces/routestopped /usr/share/doc/shorewall-3.0.8/Samples/one-interface/interfaces /usr/share/doc/shorewall-3.0.8/Samples/one-interface/rules /usr/share/doc/shorewall-3.0.8/Samples/one-interface/zones /usr/share/doc/shorewall-3.0.8/Samples/one-interface/README.txt /usr/share/doc/shorewall-3.0.8/Samples/one-interface/policy /usr/share/doc/shorewall-3.0.8/Samples/LICENSE /usr/share/doc/shorewall-3.0.8/Samples/README.txt /usr/share/doc/shorewall-3.0.8/Samples/two-interfaces/interfaces /usr/share/doc/shorewall-3.0.8/Samples/two-interfaces/masq /usr/share/doc/shorewall-3.0.8/Samples/two-interfaces/rules /usr/share/doc/shorewall-3.0.8/Samples/two-interfaces/zones /usr/share/doc/shorewall-3.0.8/Samples/two-interfaces/README.txt /usr/share/doc/shorewall-3.0.8/Samples/two-interfaces/policy /usr/share/doc/shorewall-3.0.8/Samples/two-interfaces/routestopped [ebuild R ] net-firewall/shorewall-3.0.8 USE="doc" 0 kB
If you think an elog message about enabling the Samples with the doc use flag should be added or that they should always be installed please reopen.
OK, "doc" added in USE of /etc/make.conf, shorewall recompiled and, yes, it's much better. Thanks.
(In reply to comment #3) > OK, "doc" added in USE of /etc/make.conf, shorewall recompiled and, yes, it's > much better. Thanks. > Might want to add net-firewall/shorewall doc to /etc/portage/package.use instead