Firewall file manual edit

[webcraft]

Hello,
I wanna update my firewall file for the cluster everyday with an updated list of blocked spam IPs. Therefore I created a bash script but unfortunately I can't execute it in /etc/pve/firewall/ and I can't copy files to this directory with the script. Any idea how to do it then?

Thanks for ya help.

 

[dietmar]

and I can't copy files to this directory with the script.

What is the problem?

 

[webcraft]

What is the problem?

It's always saying the file is too large though it's just 550kb to 2.2mb. There's definitely enough space available because it's working when I do it manually via terminal and dd shows more than 470GB of free space.

cp: error writing ‘/etc/pve/firewall/cluster.fw’: File too large
cp: failed to extend ‘/etc/pve/firewall/cluster.fw’: File too large

That's the function in the script which throws the error:

cp cluster.fw /etc/pve/firewall/cluster.fw

Edit: And when trying to execute the script in proxmox firewall folder there's an error that this is not available there (in this location/folder). => different file system or folder permissions?

 

[dietmar]

It's always saying the file is too large though it's just 550kb to 2.2mb.

Please do not try to store such large data on /etc/pve. This is a special files system for small configuration files, not meant to store
IP backlists. Store them somewhere else.

 

[webcraft]

Please do not try to store such large data on /etc/pve. This is a special files system for small configuration files, not meant to store
IP backlists. Store them somewhere else.

I see. How to add it to Proxmox Firewall then? Couldn't fine a command to import such a file.

 

[webcraft]

Or is there another way to go?
I want this IPs to be blocked from the host and vm's.

 

[dietmar]

Or is there another way to go?
I want this IPs to be blocked from the host and vm's.

I guess you should try to setup your own iptables chain/rule ...