CT with IPv6 and firewall

[Hetasser]

Hi,
I'm currently installing a proxmox on an IPv6-only host (there is an IPV4 but only for emergencies)

some of my containers are supposed to be available from outside (nginx/apache servers mainly), but I would like some of them to be only accessible from other containers

to be clear : I have a few CT with an IP like <IPv6Range>:236:4 to <IPv6Range>:236:10 with nginx/apache installed, and my databases are on <IPv6Range>:236:90 to <IPv6Range>:236:99

I would like my databases to be only accessible from the nginx/apache containers, not from outside

I activated the firewall at Datacenter level


at host level




and at container level


I used "drop" as input policy to test

however I'm still able to connect from my PC

what am I missing here ?

thanks

 

[_gabriel]

Don't forget to enable firewall at Network/NIC ' CT/VM level too.

 

[Hetasser]

thanks for your answer
I already have I think