> - only use firewall=1|0 from network configuration, to enable/disable fwbr > bridge > - use firewall=0 by default > - remove pve-brige-fw script. (we simply use tap firewall option in pve-brige) Oh, this is even simpler :-) Give me some time to think about that.