example/host.fw

   1 # /etc/pve/local/host.fw
   2
   3 [OPTIONS]
   4
   5 enable: 0
   6 tcp_flags_log_level: info
   7 smurf_log_level: nolog
   8 log_level_in: info
   9 log_level_out: info
  10
  11 # default policy
  12 policy_in: DROP
  13 policy_out: ACCEPT
  14
  15 nf_conntrack_max: 196608
  16
  17
  18 [RULES]
  19
  20 IN  SSH(ACCEPT) net0
  21 OUT SSH(ACCEPT) net0