use 'all' instead of 'any'

[pve-firewall.git] / config / 100.fw

diff --git a/config/100.fw b/config/100.fw
index 30903cb8d4137d42c462ec729d8b9f928b92bbeb..889a1012fd2b7fe9b0b4f8ca295bb12cedeea404 100644 (file)
--- a/config/100.fw
+++ b/config/100.fw
@@ -1,13 +1,16 @@
 # Example VM firewall configuration
-#ACTION SOURCE DEST
+#ACTION IFACE SOURCE DEST
 
 [IN]
 
-ACCEPT net0 any any tcp 80
+SSH(ACCEPT) net0 192.168.2.192 -
 
 [OUT]
 
-ACCEPT net0 any any
+
+DNS(ACCEPT) net0
+Ping(ACCEPT) net0
+SSH(ACCEPT)