> > do you think that /etc/init.d/pve-firewall start is a good place to > > load the module ? > > not really, because we do not want to load the module if firewall is disabled in > /etc/pve/firewall/cluster.fw maybe: pve-firewall/src/pve-firewall, method run_server()