Re: [pve-devel] [PATCH firewall] introduce ebtables_enable option to cluster config

2018-05-22 Thread Wolfgang Bumiller
We also need an ebtables-equivalent for 'remove_pvefw_chains' otherwise the previous rules aren't removed when disabling ebtables after having had them enabled for a while. On Thu, May 17, 2018 at 05:03:56PM +0200, Stoiko Ivanov wrote: > minimally fixes #1764, by introducing ebtables_enable as opt

[pve-devel] [PATCH firewall] introduce ebtables_enable option to cluster config

2018-05-17 Thread Stoiko Ivanov
minimally fixes #1764, by introducing ebtables_enable as option in cluster.fw Signed-off-by: Stoiko Ivanov --- Note: A better option would be to just not overwrite any output of ebtables-save, not containing pve-specific interface names or PVE, however this patch should at least fix the problem