X-Git-Url: https://git.proxmox.com/?p=pve-firewall.git;a=blobdiff_plain;f=src%2FPVE%2FFirewall.pm;h=dad259e66d7362e901b4b26c5ab140d07d991227;hp=7dbe13de472b81de6944ca0db5e23980c23ac623;hb=aa229652d9625b4a677813b40a55e0c54dfc3acd;hpb=4a071299a37e9530f1205772deb4dd08094e9d2d

diff --git a/src/PVE/Firewall.pm b/src/PVE/Firewall.pm
index 7dbe13d..dad259e 100644
--- a/src/PVE/Firewall.pm
+++ b/src/PVE/Firewall.pm
@@ -3348,10 +3348,10 @@ sub compile_ipsets {
 
     # generate firewall rules for LXC containers
     foreach my $vmid (keys %{$vmdata->{lxc}}) {
-        eval {
-            my $conf = $vmdata->{lxc}->{$vmid};
-            my $vmfw_conf = $vmfw_configs->{$vmid};
-            return if !$vmfw_conf;
+	eval {
+	    my $conf = $vmdata->{lxc}->{$vmid};
+	    my $vmfw_conf = $vmfw_configs->{$vmid};
+	    return if !$vmfw_conf;
 
 	    # When the 'ipfilter' option is enabled every device for which there
 	    # is no 'ipfilter-netX' ipset defiend gets an implicit empty default
@@ -3388,8 +3388,8 @@ sub compile_ipsets {
 
 	    generate_ipset_chains($ipset_ruleset, $cluster_conf, $vmfw_conf, $device_ips, $ipsets);
 	    generate_ipset_chains($ipset_ruleset, $cluster_conf, $vmfw_conf, $device_ips, $implicit_sets);
-        };
-        warn $@ if $@; # just to be sure - should not happen
+	};
+	warn $@ if $@; # just to be sure - should not happen
     }
 
     generate_ipset_chains($ipset_ruleset, undef, $cluster_conf, undef, $cluster_conf->{ipset});