This firewall also assumes (for now) that forwarding should be enabled in Linux. Otherwise no host on the local network will be able to reach the internet.