Firewall rules for port 22

[kbrault]

Hello everyone,

I have two sites, each running proxmox behind a NAT firewall which is on the internet with static IP's.

I am planning on backing up each site to the other via PVE-zsync by forwarding port 22 to each proxmox server and pointing pve-zsync to the static IP of the other site.

I was thinking I can add a firewall to block any port 22 traffic not originating on the local LAN or the remote static IP.

I am afraid I have no idea on how to setup that rule.

Would anyone be willing to help me out with this?

Thank you in advance.

Kevin

 

[matrix]

Hello,
You can add this rule manually to file /etc/pve/firewall/cluster.fw

IN SSH(ACCEPT) -i net0 -source 192.168.2.192

# only allow SSH from 192.168.2.192
or you can add from Web GUI
More details: https://pve.proxmox.com/pve-docs/pve-admin-guide.html#chapter_pve_firewall