From 51e57fee88c0d9be0206f07fb8a7799987b55126 Mon Sep 17 00:00:00 2001
From: Dietmar Maurer <dietmar@proxmox.com>
Date: Tue, 15 Apr 2014 08:15:53 +0200
Subject: [PATCH] disable firewall by default

---
 example/cluster.fw  | 1 +
 src/PVE/Firewall.pm | 2 +-
 2 files changed, 2 insertions(+), 1 deletion(-)

diff --git a/example/cluster.fw b/example/cluster.fw
index e460943..e9a57ea 100644
--- a/example/cluster.fw
+++ b/example/cluster.fw
@@ -1,5 +1,6 @@
 [OPTIONS]
 
+# enable firewall (cluster wide setting, default is disabled) 
 enable: 1
 
 # default policy for host rules
diff --git a/src/PVE/Firewall.pm b/src/PVE/Firewall.pm
index bf8f193..ba0ddae 100644
--- a/src/PVE/Firewall.pm
+++ b/src/PVE/Firewall.pm
@@ -2875,7 +2875,7 @@ sub update {
 	my $cluster_conf = load_clusterfw_conf();
 	my $cluster_options = $cluster_conf->{options};
 
-	my $enable = !(defined($cluster_options->{enable}) && ($cluster_options->{enable} == 0));
+	my $enable = $cluster_options->{enable};
 
 	my $status = read_pvefw_status();
 
-- 
2.39.2