diff --git a/proxmox-firewall/resources/proxmox-firewall.nft b/proxmox-firewall/resources/proxmox-firewall.nft index 2dd7c48..30f7b4f 100644 --- a/proxmox-firewall/resources/proxmox-firewall.nft +++ b/proxmox-firewall/resources/proxmox-firewall.nft @@ -356,7 +356,7 @@ table bridge proxmox-firewall-guests { } chain pre-vm-out { - meta protocol != arp ct state vmap { established : accept, related : accept, invalid : drop } + meta protocol != arp ct state vmap { established : accept, related : accept, invalid : jump invalid-conntrack } } chain vm-out { @@ -384,7 +384,7 @@ table bridge proxmox-firewall-guests { chain before-bridge { meta protocol arp accept - meta protocol != arp ct state vmap { established : accept, related : accept, invalid : drop } + meta protocol != arp ct state vmap { established : accept, related : accept, invalid : jump invalid-conntrack } } chain forward {