Default Firewall Ports and Documentation Bug?

[absolutesantaja]

The documentation at https://pve.proxmox.com/wiki/Firewall seems to indicate that "If you enable the firewall, traffic to all hosts is blocked by default. Only exceptions is WebGUI(8006) and ssh(22) from your local network." ports 8006 and 22 are allowed by default when enabling the firewall. On the current non subscription release this doesn't appear to be true. Enabling the firewall blocks access to PVE on ports 8006 and 22.

Trying to figure out if I'm misreading the documentation or if that's out of date.

 

[Moayad]

Hi,

Trying to figure out if I'm misreading the documentation or if that's out of date.

No, pve-firewall block all traffic except 8086 and 22

Please check your firewall rules and post output PVE version pveversion -v.

You can see the allow ports with command:
iptables -S | grep 'RETURN' | grep 'dport'

 

[absolutesantaja]

I see what I did wrong now, I'm accessing the box over a VPN and while it's landing me behind the same firewall the VPN is on a different subnet. When I had tried running in "iptables -L" earlier I was getting no results back but I must have done it before I turned on the firewall.

Thanks