only use --mark for OUT chain

[pve-firewall.git] / pvefw

diff --git a/pvefw b/pvefw
index 4370678570dca59386ded0a90828d28148d8428b..1c346b555e7e4e6019452593844508b0145cfefd 100755 (executable)
--- a/pvefw
+++ b/pvefw
@@ -82,8 +82,8 @@ __PACKAGE__->register_method ({
        my ($param) = @_;
 
        my $code = sub {
-           PVE::Firewall::enable_bridge_firewall();
-           PVE::Firewall::compile_and_start($param->{verbose});
+           my $ruleset = PVE::Firewall::compile();
+           PVE::Firewall::apply_ruleset($ruleset, $param->{verbose});
        };
 
        PVE::Firewall::run_locked($code);