Search results

is there a way to write iptables rules before pve-firewall start ? in which files would it be possible ?

ok i will open a bug report

we got a nice network :) 64 bytes from 192.168.0.3: icmp_seq=1 ttl=64 time=0.100 ms

iptables -A INPUT -p gre -j ACCEPT iptables -A OUTPUT -p gre -j ACCEPT not -D

i found the start of the problem. My problem is that GRE is not accepted by rules and my multicast for cluster is on the GRE If i run pve-firewall simulate i got this error : unable to parse rule: -p gre -j RETURN at /usr/share/perl5/PVE/FirewallSimulator.pm line 245. I think there is a...

Quorum information ------------------ Date: Mon Oct 24 09:44:34 2016 Quorum provider: corosync_votequorum Nodes: 5 Node ID: 0x00000001 Ring ID: 4/3660 Quorate: Yes Votequorum information ---------------------- Expected votes: 5 Highest expected: 5 Total votes: 5 Quorum: 3...

Firstly thanks for your reply, i've already open udp port 5404 and 5405 in "IN rules" in my datacenter. Have a look at the picture included for my datacenter configuration if you could find any mistake. Do you have any other idea ?

I got a cluster with 5 nodes. Each of them connected via a GRE to allow multicast (because my local network not allow multicast). Everything work fine and i want to activate firewall on cluster. My problem is that when i start firewall on a node it become red and not accessible by other. My...