IPFilter / IPset not working

V

Vengance

Renowned Member
May 21, 2016
271
12
83
34
Hi,

I'm running a 3 node Proxmox cluster and have enabled the firewall on all hosts + datacenter level.
I just created a VM and applied an IP filter restricting it only to an IPv6 subnet.

When configuring an IPv4 which should not be allowed on the VM still works fine.
Ping + Incoming SSH as well as accessing a Webserver listing on the IP work all fine.


The only thing where the filter seems to have effect is blocking outgoing pings.
Pinging any hosts works only when adding the IP to the IP set, so as wished.


But how can I also block all other traffic as well? Or is just my IP filter not configured correctly?


Thanks!
 
Hi,

can you please post the specific rules that you are having issues with?
 
Same thing on my end.
The IPSet to prevent spoofing is not working.

We are running VE 7.4.-3

Code: 
cat 135.fw
[OPTIONS]

policy_out: ACCEPT
enable: 1
policy_in: ACCEPT
ipfilter: 1

[IPSET ipfilter-net0]

10.10.10.10
 
You must log in or register to reply here.
Top Bottom