How to configrue firewall

[Killbrum]

Good day! I'm newbie here and I'm newbie in Linux administration too. But I hope what somebody will find few minutes to answer my question.
I read manual from wiki page but I still have some question.

Needed rules was created. Firewall was enabled on host at all and on needed VM. But in host shell I see:
Status: disabled/running.

Thats why I think all my rules doesn't work at all. What should I do to start firewall? Thanks!

 

[Phinitris]

Hello,
please try to enable the firewall under the Datacenter tab.
See here: http://prntscr.com/50cx9r, but set the Firewall to Yes.

Best regards
Henry

 

[Killbrum]

Hello,
please try to enable the firewall under the Datacenter tab.
See here: http://prntscr.com/50cx9r, but set the Firewall to Yes.

Best regards
Henry

Okay... now I can't connect to proxmox at all

 

[Phinitris]

Hey,
;( Then you had set wrong firewall rules.
Do you have TeamViewer or something comparable, so I can assist you directly?

 

[Killbrum]

Of course, how I can PM you? skype?

 

[Phinitris]

Hey,
just send me a PM with your ID and password. If you want to, you can add me on Skype for further questions. But i don't want to disclose my nick to the public,
so I will tell you in a TeamViewer session.

 

[Killbrum]

Of course, how I can PM you? skype?

Oh... I fix it via remote connection to shell... maybe you can advise me
http://prntscr.com/50dasg

is this good? If I want to create rules only to needed VM's and each rules part must be exclusive for this VM?

 

[Phinitris]

Hey,
In proxmox VE you have different "layers" of rules.

If you set rules in the Datacenter tab, the rules would apply to all nodes (hostsystems).
If you set rules on a node, they would only apply to this node.
For different VMs/OpenVZ containers, you need to set rules for each CT/VM.

So, if you want, that the proxmox panel is globally available, you just enable the firewall in the datacenter tab and set INPUT Policy to ACCEPT.
Then you can go into the VM tab and set the INPUT policy to DROP.
Now, all incoming packets to this VM would be dropped, expect them you have rules for.

Make sure, to check the firewall checkbox at the network configuration at a VM (Network Device).

Regards
Henry

 

[kotakomputer]

Hello,
please try to enable the firewall under the Datacenter tab.
See here: http://prntscr.com/50cx9r, but set the Firewall to Yes.

Do not suggest users to ENABLE firewall w/o change DROP to ACCEPT. I see many users just BLOCKED because they have no firewall knowledge.

 

[edgi]

Help! All ports are blocked from accessing the server. I turned on the firewall but did not change the DROP to ACCEPT

What to do now?