[pve-devel] firewall 0:1 in vm net config, maybe this is the wrong place ?

[Dietmar Maurer]

> But isn't it better to keep firewall=0 by default in netx: ... ?
> (to avoid to create an extra fwbr bridge by default)

There is a global flag int /etc/pve/firewall/cluster.fw:

------------
# enable firewall (cluster wide setting, default is disabled) 
enable: 0
...
--------------

You should use this flag to configure the extra bridge.

Does that make sense?