IPFilter / IPset not working

[Vengance]

Hi,

I'm running a 3 node Proxmox cluster and have enabled the firewall on all hosts + datacenter level.
I just created a VM and applied an IP filter restricting it only to an IPv6 subnet.

When configuring an IPv4 which should not be allowed on the VM still works fine.
Ping + Incoming SSH as well as accessing a Webserver listing on the IP work all fine.


The only thing where the filter seems to have effect is blocking outgoing pings.
Pinging any hosts works only when adding the IP to the IP set, so as wished.


But how can I also block all other traffic as well? Or is just my IP filter not configured correctly?


Thanks!

 

[nunner]

Hi,

can you please post the specific rules that you are having issues with?

 

[J-T]

Same thing on my end.
The IPSet to prevent spoofing is not working.

We are running VE 7.4.-3

cat 135.fw
[OPTIONS]

policy_out: ACCEPT
enable: 1
policy_in: ACCEPT
ipfilter: 1

[IPSET ipfilter-net0]

10.10.10.10