How to prevent traffic between LXC on bridged network?

[datenimperator]

Hello,

I have a number of LXC on a bridged network. I'd like to restrict network access for those LXC in such a way

1. outbound traffic is allowed
2. one internal IP may be reached
3. all other traffic is dropped

Can this be done w/ the Proxmox 4 firewall? Or do I need to add custom iptables rules for this? Regards

Christian

 

[wbumiller]

Just enable the firewall for the container, for the network interface you want to filter, and activate the 'IP Filter' option in the container's firewall's option tab.
See the docs[1] for more details.

[1] http://pve.proxmox.com/pve-docs/chapter-pve-firewall.html#ipfilter-section