From: Dietmar Maurer <dietmar@proxmox.com>
Date: Tue, 15 Apr 2014 06:15:53 +0000 (+0200)
Subject: disable firewall by default
X-Git-Url: https://git.proxmox.com/?p=pve-firewall.git;a=commitdiff_plain;h=51e57fee88c0d9be0206f07fb8a7799987b55126

disable firewall by default
---

diff --git a/example/cluster.fw b/example/cluster.fw
index e460943..e9a57ea 100644
--- a/example/cluster.fw
+++ b/example/cluster.fw
@@ -1,5 +1,6 @@
 [OPTIONS]
 
+# enable firewall (cluster wide setting, default is disabled) 
 enable: 1
 
 # default policy for host rules
diff --git a/src/PVE/Firewall.pm b/src/PVE/Firewall.pm
index bf8f193..ba0ddae 100644
--- a/src/PVE/Firewall.pm
+++ b/src/PVE/Firewall.pm
@@ -2875,7 +2875,7 @@ sub update {
 	my $cluster_conf = load_clusterfw_conf();
 	my $cluster_options = $cluster_conf->{options};
 
-	my $enable = !(defined($cluster_options->{enable}) && ($cluster_options->{enable} == 0));
+	my $enable = $cluster_options->{enable};
 
 	my $status = read_pvefw_status();