firewall ipset

  1. R

    List of aliases and where they are applied to.

    Hello Forum, I'm currently experimenting with a host/cluster running nftables as firewall. It seems that Proxmox generates some aliases in the background (e.g., “local_network”) and applies them to IP sets (namely “management” in the case mentioned above). Could someone point me to a...
  2. F

    cluster.fw file limitations

    Hello, we have massively increased our blacklist recently due to major scraper bot issues to include entire countries and several public blocklists (deduplicated of course). Now with tens of thousands of lines we have blasted past the 128k file limit with 9mb. We have tried several work arounds...
  3. N

    Bug: When we edit an alias name or IPSet name, rules with alias or IPSet (alias into too) are not updated with new alias name

    Hello all, I have discovered a big bug: When we edit an alias name or IPSet name, rules with alias or IPSet (alias into IPSet too) are not updated with new name. I have tested with: Datacenter firewall: -> /etc/pve/firewall/cluster.fw Node firewall: -> /etc/pve/nodes/XXXX/host.fw VM...