How to disable the bridge level firewall in PVE 9.1.1

[ftzh75]

Hi,

I created a file in /etc/sysclt.d/ as following :

net.bridge.bridge-nf-call-iptables = 0
net.bridge.bridge-nf-call-ip6tables = 0
net.bridge.bridge-nf-call-arptables = 0

Then i applied it using "sysctl --system". But every time i start the pve-firewall, the value of "net.bridge.bridge-nf-call-iptables" return to 1.

How to solve it with the pve-firewall enable ?

Thanks for your help !

 

[UdoB]

I created a file in /etc/sysclt.d/ as following :

First: typo? It is "sysctl.d"...

Second: what is the filename? Only *.conf is evaluated.

 

[ftzh75]

First: typo? It is "sysctl.d"...

Yes, it's a typo. The filename is 99-bridge.conf.

I have the impression that pve-firewall monitors this setting and forces it to a value of 1 at each time interval.

 

[ftzh75]

Yes, it's a typo. The filename is 99-bridge.conf.

I have the impression that pve-firewall monitors this setting and forces it to a value of 1 at each time interval.

Is this expected behavior from Proxmox? If so, how can it be disabled? I am currently blocked by this issue. Any help appreciated. Thanks