compile ebtables rules

[pve-firewall.git] / debian / example / 100.fw

diff --git a/debian/example/100.fw b/debian/example/100.fw
index 7a8da4806366aff9c0123ffc97cec2a5893c9d5c..3a08b075d0c55bda12de2ae458b36e0552e81ea0 100644 (file)
--- a/debian/example/100.fw
+++ b/debian/example/100.fw
@@ -9,6 +9,9 @@ enable: 1
 # disable/enable MAC address filter
 macfilter: 0
 
+# limit layer2 specific protocols
+layer2_protocols: ARP,802_1Q,IPX,NetBEUI,PPP
+
 # default policy
 policy_in: DROP
 policy_out: REJECT