Default Proxmox Firewall Settings

[se4n_1]

Morning,
So I would like to compartmentalize my containers in proxmox with the proxmox firewall. Currently in datacenter options I have:
firewall=no
If I modify this to firewall=yes with firewall options out ACCEPT and in ACCEPT in the firewall tab in the datacenter, is this the same rules as when I have firewall=no ?


Essentially, when I activate the firewall I want to be sure I have the same rules as I currently do then build on top of them. If ACCEPT ACCEPT is going to open every port, thats OK but what I dont want to happen is every port is closed when I turn it on. Thus this question is about the default firewall state with firewall=no and the effect of exactly what happens with IPtables when I set firewall=yes

Best wishes,
Sean

 

[aaron]

The firewall can be enabled on a node and guest layer. Whatever is configured on the Datacenter level will be applied to the nodes, but not the guests. If you don't enable the firewall for the nodes, they will not be affected.

If you enable the firewall on a node level, you will see that there will be some default rules applied that will enable you to access the node from the local network. Should you do need to access the node from another network, you will have to create some rules that allow that.

Have you checked out the documentation for the firewall?