> +    my $vmfw_conf = PVE::Firewall::load_vmfw_conf($vmid);
> +    my $fwenable = $vmfw_conf->{options}->{enable};

This setting is not intended to change network interface settings. This is just 
to enable/disable
the rules.

My thought was that we can use /etc/pve/firewall/cluster.fw to configure that.

And to avoid the dependency problem, we can simply use another script name for 
interfaces
having firewall enabled - maybe:

/var/lib/qemu-server/pve-bridge-fw instead of /var/lib/qemu-server/pve-bridge

_______________________________________________
pve-devel mailing list
[email protected]
http://pve.proxmox.com/cgi-bin/mailman/listinfo/pve-devel

Reply via email to