only allow tcpflafgs and nosmurfs in host.fw

[pve-firewall.git] / example / 100.fw

diff --git a/example/100.fw b/example/100.fw
index 30d1b1bb6dceb6e3006975021c0fce07bc63e12c..b1f65c3bc0efa0f542baed15120d9f3a32839e37 100644 (file)
--- a/example/100.fw
+++ b/example/100.fw
@@ -19,12 +19,6 @@ log_level_in: info
 # disable log for outgoing connections
 log_level_out: nolog
 
-# disable SMURFS filter
-nosmurfs: 0
-
-# filter illegal combinations of TCP flags
-tcpflags: 1
-
 # enable DHCP
 dhcp: 1