From: Dietmar Maurer <dietmar@proxmox.com>
Date: Thu, 20 Mar 2014 06:48:58 +0000 (+0100)
Subject: add tcpflags to host.fw example
X-Git-Url: https://git.proxmox.com/?p=pve-firewall.git;a=commitdiff_plain;h=11f12eaeeeb53fc2a16383c1a1e86ea71a3d39c9;ds=sidebyside

add tcpflags to host.fw example
---

diff --git a/example/host.fw b/example/host.fw
index 79a5949..e38b2a5 100644
--- a/example/host.fw
+++ b/example/host.fw
@@ -20,6 +20,9 @@ nf_conntrack_max: 196608
 # you need to enable that explicitly
 allow_bridge_route: 1
 
+# filter illegal combinations of TCP flags
+tcpflags: 1
+
 [RULES]
 
 IN  SSH(ACCEPT) net0