[pve-firewall.git] / example / host.fw

# /etc/pve/local/host.fw

[OPTIONS]

enable: 0
tcp_flags_log_level: info
smurf_log_level: nolog
log_level_in: info
log_level_out: info

# default policy
policy_in: DROP
policy_out: ACCEPT

nf_conntrack_max: 196608


[RULES]

IN  SSH(ACCEPT) net0
OUT SSH(ACCEPT) net0
Commit	Line	Data
2d404ffc DM	1	# /etc/pve/local/host.fw
	2
	3	[OPTIONS]
	4
	5	enable: 0
	6	tcp_flags_log_level: info
	7	smurf_log_level: nolog
178a63be DM	8	log_level_in: info
178a63be DM	9	log_level_out: info
72f63fde DM	10
	11	# default policy
	12	policy_in: DROP
	13	policy_out: ACCEPT
	14
1ec3e3d0	15	nf_conntrack_max: 196608
2d404ffc	16
92e976b3 DM	17
	18	[RULES]
	19
	20	IN SSH(ACCEPT) net0
	21	OUT SSH(ACCEPT) net0