add nf_conntrack_max to example config

[pve-firewall.git] / example / host.fw

diff --git a/example/host.fw b/example/host.fw
index c64d9cd9a27b120d9bc3d2d9faf6bdb706f6b5c9..5ecca3d330e3b4afde91ea8753e5b0b4b3107a1c 100644 (file)
--- a/example/host.fw
+++ b/example/host.fw
@@ -7,5 +7,10 @@ tcp_flags_log_level: info
 smurf_log_level: nolog
 log_level_in: info
 log_level_out: info
+nf_conntrack_max: 196608
 
-# TODO
\ No newline at end of file
+
+[RULES]
+
+IN  SSH(ACCEPT) net0
+OUT SSH(ACCEPT) net0