implement allow_bridge_route feature

[pve-firewall.git] / example / host.fw

diff --git a/example/host.fw b/example/host.fw
index 32311b4b55be163893291dbbed71b6f4088978ae..79a59492b1aa1168086b20156493bb1bb7651d05 100644 (file)
--- a/example/host.fw
+++ b/example/host.fw
@@ -12,8 +12,13 @@ log_level_out: info
 policy_in: DROP
 policy_out: ACCEPT
 
+# allow more connections (default is 65536)
 nf_conntrack_max: 196608
 
+# Enable firewall when bridges contains IP address.
+# The firewall is not fully functional in that case, so
+# you need to enable that explicitly
+allow_bridge_route: 1
 
 [RULES]