Thanks again for all the inputs. I have tried a third option: arno-iptables-firewall.
Now I can reach the internet from the local network. I still don't understand why I could not get it working with Shorewall which I have used for many years. Regards Johann -- Because experiencing your loyal love is better than life itself, my lips will praise you. (Psalm 63:3)
