add global ipset blacklist

[pve-firewall.git] / debian / example / cluster.fw

diff --git a/debian/example/cluster.fw b/debian/example/cluster.fw
index bf5a98f2df46b1677c52af44099c76afb0cfd9b5..457c993dd914d82e4f429279953d0d5bb5872b72 100644 (file)
--- a/debian/example/cluster.fw
+++ b/debian/example/cluster.fw
@@ -38,3 +38,9 @@ IN  ACCEPT myserveralias
 192.168.0.0/24
 ! 10.0.0.0/8  #nomatch - needs kernel 3.7 or newer
 mynetworkalias
+
+#global ipset blacklist
+[ipset blacklist]
+
+10.0.0.8
+192.168.0./24