> on enable|disable firewall from network interface configuration, and not in > vmid.fw > I would use a different network script name: /var/lib/qemu-server/pve-bridge-fw instead of /var/lib/qemu-server/pve-bridge Wont that solve the problem?