diff --git a/service/fw.service b/service/fw.service
new file mode 100644
index 0000000..0aeb773
--- /dev/null
+++ b/service/fw.service
@@ -0,0 +1,12 @@
+[Unit]
+Description=Shorewall firewall
+After=network.target
+
+[Service]
+Type=oneshot
+RemainAfterExit=yes
+ExecStart=/usr/local/sbin/service/fw@up
+ExecStop=/usr/local/sbin/service/fw@down
+
+[Install]
+WantedBy=multi-user.target