Datacenter firewall blocks everything, even though ports are enabled.

[renstump]

Everything on one system and in the same network.
I have 3 separate LXC containers (Memos, PostgreSQL, Caddy).
Datacenter firewall is on, Input Policy: Drop, Output Policy: Accept
Node firewall is on
Container firewalls are on, Input Policy: Drop, Output Policy: Accept

Now using the example of the containers mentioned above.

Caddy: 80, 443 ports are open - incoming
Memos: 5230 (incoming) port & Macro PostgreSQL port (outgoing)
PostgreSQL: Macro PostgreSQL port (incoming)


Node:
as Security-Group "proxmox"

Datacenter: see Picture
as Security-Group "proxmox"

The problem is, when the data center firewall is on, I can't ping between the above containers (e.g. within Caddy ping to Memos or within Memos to PostgreSQL or within PostgreSQL to Memos)
If I turn off the data center firewall, I can ping the containers among each other.
I have tried for hours, but have not been able to ping the containers with the data center firewall enabled.

However, I can access my Memos instance from outside.

 

[seiji]

Hello renstump,

I'm also new to Proxmox Forum.
Can you selecting the ICMP protocol and setting the allow rules for both Inbound and Outbound to check the result.
It would also be a good idea to run a continuous ping from a different terminal for verification.

Here is the product guide, I will also review it to learn about the FW rules today:

https://pve.proxmox.com/wiki/Firewall

https://pve.proxmox.com/pve-docs/pve-admin-guide.html#chapter_pve_firewall

Hope this helps.

Respectfully.

Seiji