[pve-devel] [PATCH] add -full option to pve-firewall compile v2

Dietmar Maurer dietmar at proxmox.com
Wed Jun 18 17:32:12 CEST 2014


> +	    if ( $param->{full}){
> +		my $hostfw_conf = PVE::Firewall::load_hostfw_conf();
> +		PVE::Firewall::apply_ruleset($ruleset, $hostfw_conf,
> $ipset_ruleset, 1);
> +	    }

Oh, I think compile should not touch actual firewall settings, so simply
calling apply_ruleset() is not good.




More information about the pve-devel mailing list