disable firewall by default

diff --git a/example/cluster.fw b/example/cluster.fw
index e460943e96ffdcc774c66221fe32a875814fb363..e9a57eae1e8a5e03adc51b7480f23d8bcc663700 100644 (file)
--- a/example/cluster.fw
+++ b/example/cluster.fw
@@ -1,5 +1,6 @@
 [OPTIONS]
 
+# enable firewall (cluster wide setting, default is disabled) 
 enable: 1
 
 # default policy for host rules

diff --git a/src/PVE/Firewall.pm b/src/PVE/Firewall.pm
index bf8f1931dfd425a300b2a059cc3f926997309362..ba0ddae897299c20563dda989441cebe9b79a7c1 100644 (file)
--- a/src/PVE/Firewall.pm
+++ b/src/PVE/Firewall.pm
@@ -2875,7 +2875,7 @@ sub update {
        my $cluster_conf = load_clusterfw_conf();
        my $cluster_options = $cluster_conf->{options};
 
-       my $enable = !(defined($cluster_options->{enable}) && ($cluster_options->{enable} == 0));
+       my $enable = $cluster_options->{enable};
 
        my $status = read_pvefw_status();