do not set persistent state if firewall is disabled

[pve-firewall.git] / src / PVE / Firewall.pm

diff --git a/src/PVE/Firewall.pm b/src/PVE/Firewall.pm
index ba0ddae897299c20563dda989441cebe9b79a7c1..d5d4950b6aaa4be45c796d37c084dc599452976c 100644 (file)
--- a/src/PVE/Firewall.pm
+++ b/src/PVE/Firewall.pm
@@ -2882,11 +2882,7 @@ sub update {
        die "Firewall is disabled - cannot start\n" if !$enable && $start;
 
        if (!$enable) {
        die "Firewall is disabled - cannot start\n" if !$enable && $start;
 
        if (!$enable) {

-           if ($status ne 'stopped') {
-               print "trying to stop firewall (firewall is disabled)\n" if $verbose;
-               PVE::Firewall::remove_pvefw_chains();
-               PVE::Firewall::save_pvefw_status('stopped');
-           }
+           PVE::Firewall::remove_pvefw_chains();

            print "Firewall disabled\n" if $verbose;
            return;
        }
            print "Firewall disabled\n" if $verbose;
            return;
        }