Can't access node with Firewall on

[leviackerman91]

Hi all! I'm trying to set up firewall, but when the firewall is on i can't access my node either with GUI or SSH. This is my config:

Datacenter -> Firewall: Yes
Datacenter -> No rules setted up

proxmox1 -> Firewall: Yes
proxmox1 -> This rules, where 192.168.1.0 is my local subnet (router ip is 192.168.1.254) and 10.0.0.0 is for wireguard VPN)

 

[UdoB]

I do NOT use this firewall implementation. But I do believe the first rule "DROP" should be the last one.

First allow what you want. Then, at the end, drop the rest...

You can move them by dragging the symbol left of the rule number, I believe.

 

[SteveITS]

@leviackerman91 By default the Input Policy is DROP so you don't need your own drop rule. Unless you've changed the setting. And then the order matters as already noted.

 

[_gabriel]

+ ports 8006 and 22 are already allowed with default PVE rules, for local subnet.
https://pve.proxmox.com/wiki/Firewall#pve_firewall_default_rules

 

[leviackerman91]

So, basically i have to leave the tw rules for Wireguard VPN?

Datacenter Firewall


Node Firewall