firewall on VM level does not work

[n0bie]

helo
we use proxmox latest 7.2.3
we have enable firewall at datacenter level. input and output policy ACCEPT.

and then we enable VM firewall and nic virtio firewall on.

then under VM firewall option, we set input and output policy DROP.
as the result... our VM still has internet connection..able to do ping outside .. am i missing something?
thanks

 

[mira]

Did you enable the firewall on the host level as well?

 

[n0bie]

sorry we forgot to start the firewall pve..
thanks