> do you think that /etc/init.d/pve-firewall start is a good place to load the > module ? not really, because we do not want to load the module if firewall is disabled in /etc/pve/firewall/cluster.fw