sub generate_bridge_chains {
my ($ruleset, $hostfw_conf, $bridge) = @_;
sub generate_bridge_chains {
my ($ruleset, $hostfw_conf, $bridge) = @_;
# fixme: what log level should we use here?
my $loglevel = get_option_log_level($options, "log_level_out");
# fixme: what log level should we use here?
my $loglevel = get_option_log_level($options, "log_level_out");
ruleset_addrule($ruleset, "PVEFW-FORWARD", "-m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT");
my $hostfw_options = {};
ruleset_addrule($ruleset, "PVEFW-FORWARD", "-m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT");
my $hostfw_options = {};
$filename = "/etc/pve/local/host.fw";
if (my $fh = IO::File->new($filename, O_RDONLY)) {
$filename = "/etc/pve/local/host.fw";
if (my $fh = IO::File->new($filename, O_RDONLY)) {