[SOLVED] firewall not blocking anything

[Corwin]

Hello,
I just installed proxmox VE 4.1. Firewall has been enabled at the datacenter level (input and output policy = ACCEPT) and at the host level.
Then at the vm level, also enabled, it seems it does not the work !
To be sure I put both input and output policy to DROP and add one single rule to allow https, but everything I would like to isolate is still allowed: samba, ftp...
The firewall log at this level is empty

I'm sure I'm wrong, but where ?? I tried to look at the config files but I'm not an iptable expert. Any advice ?? Thanks!

 

[tom]

did you enable the firewall on the virtual NIC?

 

[Corwin]

arrrggg ! I forgot to check it at time of VM installation... You got it, it works fine now !
I completely missed it, It should be stated on the wiki page http://pve.proxmox.com/wiki/Proxmox_VE_Firewall
Thanks !

 

[tom]

its already on the wiki but yes, easy to miss.

 

[dison4linux]

Are you running KVM VMs or LXC Containers?
I'm having the same trouble (not blocking anything) with LXC Containers. https://forum.proxmox.com/threads/proxmox-ve-firewall-help-on-ovh.25880/
I do have the enable checked at the VM/container level but no dice.