firewall can not block port VM

[Dzung]

hello!
I was install pve 5.4, I want to block ssh to VM but can not block. this is my config:
/etc/pve/firewall# cat 107.fw
[OPTIONS]

ipfilter: 0
policy_in: ACCEPT
enable: 1

[RULES]

IN DROP -i net0 -p tcp -dport 22 -sport 22 -log alert
anyone tell me how to block port ssh ?
Thank all ?

 

[spirit]

Do you have enable firewall on vm interface toi?

 

[dietmar]

Also, why -sport 22 ?? (makes no sense)

IN DROP -i net0 -p tcp -dport 22

should do the job.

 

[Dzung]

I test it running ok,
Thank you