Adding new custom rules per machine

[Killbrum]

Good day folks! I want to add some extra rules for iptables and I want to do this through proxmox web interface. Is there any way to do this? Anyway I'll be glad to see this feature in next releases. It will be very helpful to add/del and enable/disable custom rules per vm. Thanks!

 

[dietmar]

Not sure what you mean by custom rules? You can use the firewall GUI to setup rules for your VM.

 

[Killbrum]

Yup, but you only can allow/drop packets from-to via some port. But if I want to add something like:

iptables -t raw -I PREROUTING -p tcp -m tcp --syn -j CT --notrac

or something like this. So... I can do it only via terminal, right?

 

[dietmar]

Yes, you need to do that somewhere else.

 

[Martin Cleaver]

You could use a proxmox-setup ct script for that. See http://github.com/mrjcleaver/proxmox-setup