shorewall-policy.txt

$FW     net             ACCEPT
$FW     loc             ACCEPT
$FW     dmz             ACCEPT
$FW     wg              ACCEPT

loc     net             ACCEPT
loc     $FW             ACCEPT
loc     dmz             ACCEPT
loc     wg              ACCEPT

dmz     net             ACCEPT

wg      $FW             ACCEPT

net     all             DROP            info

# THE FOLLOWING POLICY MUST BE LAST
all     all             REJECT          $LOG_LEVEL