assume rule is enabled if {enable} is not defined

diff --git a/src/PVE/Firewall.pm b/src/PVE/Firewall.pm
index efeedf225fd6d373414446cd6f58b0ce4245048c..160e32b3d6cf7aff8e1d2e436478d0b445430dc0 100644 (file)
--- a/src/PVE/Firewall.pm
+++ b/src/PVE/Firewall.pm
@@ -765,7 +765,7 @@ sub iptables_rule_exist {
 sub ruleset_generate_cmdstr {
     my ($ruleset, $chain, $rule, $actions, $goto) = @_;
 
-    return if !$rule->{enable};
+    return if defined($rule->{enable}) && !$rule->{enable};
 
     my @cmd = ();