[PATCH pve-firewall v4 05/27] firewall: parser: do not log errors for disabled rules

[Arthur Bied-Charreton <a.bied-charreton@proxmox.com>]

The rule parser always logged errors when encountering them, even if the
offending rule was disabled.

The following commits add functionality to automatically disable rules
with dangling references to ipsets or aliases. Avoid logging errors for
disabled rules since that will then become an expected state.

Signed-off-by: Arthur Bied-Charreton <a.bied-charreton@proxmox.com>
---
 src/PVE/Firewall.pm | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/PVE/Firewall.pm b/src/PVE/Firewall.pm
index da6976e..a01738c 100644
--- a/src/PVE/Firewall.pm
+++ b/src/PVE/Firewall.pm
@@ -3384,7 +3384,7 @@ sub parse_fw_rule {
     die "unable to parse rule parameters: $line\n" if length($line);
 
     $rule = verify_rule($rule, $cluster_conf, $fw_conf, $rule_env, 1);
-    if ($rule->{errors}) {
+    if ($rule->{enable} && $rule->{errors}) {
         # The verbose flag really means we're running from the CLI and want
         # output on the console - in the other case we really want such errors
         # to go into the syslog instead.
-- 
2.47.3