Block IP ranges globally for cluster and all VM/CT's

[pizza]

Hi,

Is it possible to block a list of IP ranges globally for a Proxmox cluster, and all VM and CT's, even if the firewall is not enabled in the VM's?

 

[Dunuin]

You can use the PVE firewall for that. Datacenter firewall for the cluster and VMs/LXCs firewall for the VMs/LXCs.

 

[pizza]

You can use the PVE firewall for that. Datacenter firewall for the cluster and VMs/LXCs firewall for the VMs/LXCs.

This is the right place?

/etc/pve/firewall/cluster.fw

[IPSET blacklist]

I'm looking for a solution to block all IP addresses from RU. Can proxmox firewall handle such large ipset?