implement nosmurfs option for hiost firewall

[pve-firewall.git] / example / host.fw

diff --git a/example/host.fw b/example/host.fw
index e38b2a58b24fec3e55a9da53b1d4caa010fd2f96..663d2d7f05b5d0506cfaa449a3036fd5b078b565 100644 (file)
--- a/example/host.fw
+++ b/example/host.fw
@@ -20,6 +20,9 @@ nf_conntrack_max: 196608
 # you need to enable that explicitly
 allow_bridge_route: 1
 
 # you need to enable that explicitly
 allow_bridge_route: 1
 

+# disable SMURFS filter
+nosmurfs: 0
+

 # filter illegal combinations of TCP flags
 tcpflags: 1
 
 # filter illegal combinations of TCP flags
 tcpflags: 1