X-Git-Url: https://git.proxmox.com/?p=pve-firewall.git;a=blobdiff_plain;f=example%2Fhost.fw;h=79a59492b1aa1168086b20156493bb1bb7651d05;hp=32311b4b55be163893291dbbed71b6f4088978ae;hb=530c005e7d89cdbae2de5e0a6b19b461f5bd7c6b;hpb=11388be71bcefa1d0e690ab3be3722705e6207b3 diff --git a/example/host.fw b/example/host.fw index 32311b4..79a5949 100644 --- a/example/host.fw +++ b/example/host.fw @@ -12,8 +12,13 @@ log_level_out: info policy_in: DROP policy_out: ACCEPT +# allow more connections (default is 65536) nf_conntrack_max: 196608 +# Enable firewall when bridges contains IP address. +# The firewall is not fully functional in that case, so +# you need to enable that explicitly +allow_bridge_route: 1 [RULES]