plug venet0 chains into PVEFW-FORWARD

[pve-firewall.git] / example / host.fw

diff --git a/example/host.fw b/example/host.fw
index 57db272da5f9cc98c2ada97bb9ba0a54b0f3ce8b..32311b4b55be163893291dbbed71b6f4088978ae 100644 (file)
--- a/example/host.fw
+++ b/example/host.fw
@@ -8,6 +8,12 @@ smurf_log_level: nolog
 log_level_in: info
 log_level_out: info
 
+# default policy
+policy_in: DROP
+policy_out: ACCEPT
+
+nf_conntrack_max: 196608
+
 
 [RULES]