firewall instant API call apply

[pve-firewall.git] / src / PVE / API2 / Firewall / Cluster.pm

diff --git a/src/PVE/API2/Firewall/Cluster.pm b/src/PVE/API2/Firewall/Cluster.pm
index b924f4edc22de2250b3db3c7a4e3aa215ce83f04..c4e2b63bcf8d5e1b783d7552be9fa64a044b3c39 100644 (file)
--- a/src/PVE/API2/Firewall/Cluster.pm
+++ b/src/PVE/API2/Firewall/Cluster.pm
@@ -175,6 +175,12 @@ __PACKAGE__->register_method({
 
        PVE::Firewall::save_clusterfw_conf($cluster_conf);
 
+       # instant firewall update when using double (anti-lockout) API call
+       # -> not waiting for a firewall update at the first (timestamp enable) set
+       if (defined($param->{enable}) && ($param->{enable} > 1)) {
+           PVE::Firewall::update();
+       }
+
        return undef;
     }});