1 # /etc/pve/local/host.fw
6 tcp_flags_log_level: info
15 # allow more connections (default is 65536)
16 nf_conntrack_max: 196608
18 # Enable firewall when bridges contains IP address.
19 # The firewall is not fully functional in that case, so
20 # you need to enable that explicitly
23 # disable SMURFS filter
26 # filter illegal combinations of TCP flags