Firewall for local networks

[micmoe]

Hi,
I have setup a proxmox VE version 8.2.4.
I am testing some firewalling features.

I have tried to DROP all incoming trafic at the Datacenter and node level but doesn't seems to be working.






VM is 192.168.1.20, PVE server is 192.168.1.100
Is there any rules that allow local networks despite the rules ?

I can see drop at the node level for outside LAN access :

DROP: IN=vmbr0 MAC=60:a4:4c:43:08:15:24:95:04:a4:b3:a0:08:00 SRC=87.236.176.78 DST=192.168.1.100 LEN=60 TOS=0x00 PREC=0x00 TTL=250 ID=11009 DF PROTO=TCP SPT=60183 DPT=22 SEQ=1619498995 ACK=0 WINDOW=64240 SYN

Thanks for your help.

 

[shanreich]

We automatically allow access from the management network. You can check what is considered the management network with the following command:

pve-firewall localnet

 

[micmoe]

Section 13.5.1. of the documentation sorry for the miss on my part and thanks for the fast respond on yours.