Block all internal IP addresses except 1 for GUI

M

mcdaniels

Member
Feb 1, 2021
44
0
11
48
Hi,
I am trying to allow access to PMVE GUI only from one IP. So I have activated the datacenter and hostfirewall and put the following rules to the datacenter fw:

from: 192.168.252.102/32 to 192.168.252.100 (GUI) -> allow
Default policy for incoming is drop

Setting this has no effect / or limitation to my internal network, when it comes down to accessing the GUI. So I assume this comes from PM VE default setting allowing access from the internal network to the GUI.

Will I have to use a explicit:
from 192.168.252.0/24 to 192.168.252.100 -> DROP and then
from: 192.168.252.102/32 to 192.168.252.100 (GUI) -> allow

to make it work?

Thx
 
You must log in or register to reply here.
Top Bottom