Only include multicast rules if transport is udp

[pve-firewall.git] / debian / pve-firewall.service

diff --git a/debian/pve-firewall.service b/debian/pve-firewall.service
index 7d253659cf61a471231ff24376c910d4abe632cd..f95ce6d6589bf4c9e68956134d8d2e013aa8626c 100644 (file)
--- a/debian/pve-firewall.service
+++ b/debian/pve-firewall.service
@@ -8,10 +8,13 @@ Before=shutdown.target
 Conflicts=shutdown.target
 
 [Service]
+ExecStartPre=-/usr/bin/update-alternatives --set ebtables /usr/sbin/ebtables-legacy
+ExecStartPre=-/usr/bin/update-alternatives --set iptables /usr/sbin/iptables-legacy
+ExecStartPre=-/usr/bin/update-alternatives --set ip6tables /usr/sbin/ip6tables-legacy
 ExecStart=/usr/sbin/pve-firewall start
 ExecStop=/usr/sbin/pve-firewall stop
 ExecReload=/usr/sbin/pve-firewall restart
-PIDFile=/var/run/pve-firewall.pid
+PIDFile=/run/pve-firewall.pid
 Type=forking
 
 [Install]