X-Git-Url: https://git.proxmox.com/?p=pve-firewall.git;a=blobdiff_plain;f=example%2F100.fw;h=c144db8a7901f5983afe3d2b236e3fa45d1e8836;hp=3ff340ab923503423d8279bb03ac645cbfc2b66e;hb=41b6fef1cf810d85bb57a61f05a153b41fd85912;hpb=11bac5c2978d3f5f68024a37a733d8182888ec8c

diff --git a/example/100.fw b/example/100.fw
index 3ff340a..c144db8 100644
--- a/example/100.fw
+++ b/example/100.fw
@@ -1,9 +1,35 @@
 # Example VM firewall configuration
-#ACTION IFACE SOURCE DEST PROTO D-PORT S-PORT
+
+[OPTIONS] # VM specific firewall options
+
+# disable/enable the whole thing
+enable: 1 
+
+# disable/enable MAC address filter
+macfilter: 0
+
+# default policy
+policy-in: DROP
+policy-out: REJECT
+
+# filter SMURFS
+nosmurfs: 1
+
+# filter illegal combinations of TCP flags
+tcpflags: 1
+
+# enable DHCP
+dhcp: 1
+
 
 [IN]
 
-SSH(ACCEPT) net0 192.168.2.192 -
+#ACTION IFACE SOURCE DEST PROTO D-PORT S-PORT
+
+SSH(ACCEPT) net0
+SSH(ACCEPT) net0 # a comment
+SSH(ACCEPT) net0 192.168.2.192  # only allow SSH from  192.168.2.192
+|SSH(ACCEPT) net0 # disbaled rule
 
 [OUT]