[SOLVED] Firewall

[Dexter23]

Hi i wanto to close this port 111/udp on PBS, but in the GUI i can't find Firewall section to do that, i need to do via terminal with iptable? if the answer is yes i don't know how to use iptables.

 

[Chris]

Hi,
PBS does not provide a Firewall as PVE, so you will have to configure the rules yourself, please find some iptables basics in resources such as e.g. the ArchLinux wiki https://wiki.archlinux.org/title/Iptables

You probably want something like

# No router, so drop all traffic which otherwise will be forwarded
iptables -P FORWARD DROP
# Block incomming udp traffic with destination port 111
iptables -A INPUT -p udp --dport 111 -j REJECT

 

[Dexter23]

Hi Chris
Is not implemented yet on the kernel?

 

[Chris]

You will have to install the userspace programm via apt install iptables

 

[Dexter23]

Is possibile to use UFW?

 

[Chris]

Is possibile to use UFW?

Yes, that is possible as PBS is not in any way interacting with the nftables.

 

[Dexter23]

Ok i install ufw thanks