no default shorewall interface, make it explicit
no default gateway, make it explicit
check in recipe
make pear work
5 seconds for timeout is a little too low
wrong order