Hello,
I using a 3 Node Proxmox 4.1 Cluster with PVE-Firewall.
The BSI Team makes a Pentest on my Server and have reported, that rpcbind and squid-http port is open.
So i think ok, and add rules to drop the ports 111 and 3128 tcp/udp.
But the Firewall doesn't block the Ports (other Settings...