I'm following Jay's proxmox tutorial (https://www.youtube.com/watch?v=DNsLLrCgK0U&list=PLT98CRl2KxKHnlbYhtABg6cF50bYa8Ulo&index=12) and using exactly the same steps I receive different results: after turning on firewall both on datacenter and host level, I am not blocked. Both 8006 and 22 works from local devices.
Going through documentation I found this comment:
Is it something new? Seems weird to me to allow anything by default without any highlight in GUI and /etc/pve/firewall/cluster.fw, but my real question is: how to change it if I actually want to block local access? I tried something like this, but nothing has changed.
Going through documentation I found this comment:
If you enable the firewall, traffic to all hosts is blocked by default. Only exceptions is WebGUI(8006) and ssh(22) from your local network.
Is it something new? Seems weird to me to allow anything by default without any highlight in GUI and /etc/pve/firewall/cluster.fw, but my real question is: how to change it if I actually want to block local access? I tried something like this, but nothing has changed.
Code:
[OPTIONS]
enable: 1
[RULES]
IN DROP -i vmbr0 -source 0.0.0.0/0 -p tcp -sport 8006 -log nolog
IN ACCEPT -i vmbr0 -source 192.168.45.89/32 -p tcp -sport 22 -log nolog
IN ACCEPT -i vmbr0 -source 192.168.45.89/32 -p tcp -sport 8006 -log nolog
Last edited: