Firewall - Host Isolation

[CarlM24]

Hi there,

I am trying to prevent VMs from communicating with each other. After reading around, it appears that enabling the firewall should prevent VMs from communicating. However, the VMs are still able to communicate and discover each other.

I have ran Nmap on a test machine that is running inside of Proxmox, and it was able to pick up all of the running machines using their local IP addresses. Perhaps I have misunderstood how the feature is intended to work, but shouldn't this stop that?

I have attached a screenshot of the Nmap showing an open port on 2 separate VMs as well as screenshots showing that the firewall is enabled on all 3 of the VMs.

Any assistance is appreciated.

Kind regards,
Carl

 

[matrix]

Are you sure to run firewall?
to check it out, post output for the following command:

pve-firewall status

 

[spirit]

do you have enable firewall too in the firewall vm options?(not only on nic)

 

[LnxBil]

do you have enable firewall too in the firewall vm options?(not only on nic)

and probably on the datacenter level, too

 

[CarlM24]

Yeah, I didn't have it enabled on my node or datacentre - my bad!

Thanks for the responses