Apologize if this is a dumb or often asked question, I'm just now experimenting with Proxmox firewalls. I noticed that if I enable a rule on a VM firewall that, say, allows ICMP, I'm able to ping it pretty quickly, but if I disable that rule again, the pings don't stop for a really, really long time. I take this to be an intentional feature of some sort, that active connections aren't dropped when a FW rule that disallows them is enabled? But at least in my case, I can sit there and stop ping/start pings over and over again and they almost never seem to stop, even with a rule explicitly blocking them, unless I run something on the host like conntrack -D -p -d icmp my-vm-ip-address
This is a problem for us, I'd like to know that when I disallow traffic, that traffic is disallowed and connections are dropped, just like a normal firewall would. Is there a way to do that?
Thanks!
Matt H
This is a problem for us, I'd like to know that when I disallow traffic, that traffic is disallowed and connections are dropped, just like a normal firewall would. Is there a way to do that?
Thanks!
Matt H
