Outgoing traffic blocked from VM with "Output Policy = ACCEPT" only rules.

[ATX]

Hi

I encouter the following problem.

• From proxmox instance, I am able to ping outside.
• However from a VM i am not able to ping outside.

The firewall is ON, set on output policy to ACCEPT and withtout restricting rules.

Could you please advice ? Please find below the GUI configuration.

Regards

 

[ATX]

This is the exact same that https://forum.proxmox.com/threads/o...firewall-enabled-but-no-drop-rules-set.59727/

However, for some reasons that I do not know "IP Filter = YES" was the issue.

Once disabled, this worked.
If anyone could explain (ref to the link for the configuration used).

 

[fabian]

by setting that option you say "this guest is only allowed to use certain IPs", but then you don't tell the firewall which IPs, so none are allowed. see https://pve.proxmox.com/pve-docs/pve-admin-guide.html#pve_firewall_ip_sets