yes,
misspelling - PVE nodes have got own rule-set,
each lxc also has got own rule-set
problem is with services/ports which I want to add after installation and configuration iRedmail
moreover,
- probing with nc from inside lxc - communication OK
- probing with nc from outside lxc - comm error