Proxmox Firewall default management rules

[h9k]

Hi there,
I am running Proxmox 3.4 but for some reason the default management rules for the firewall are not there, so on the hosts I am running input policy on ACCEPT for now, since I am not sure what I need to set up aside of SSH and 8006, for VNC and clustering for example.
I could not find any solid infos in the forum/wiki/google.
Can someone maybe copy/paste the default rules from the /etc/pve/firewall/cluster.fw file please?

 

[wolfgang]

Hi,
the default ports are always open in the local network except you are explicit close them.
This means you have nothing to do that pve is working correct in your local network.
Only thing is be sure you are on the latest version of pve.
If you what manage from outer networks use the
https://pve.proxmox.com/wiki/Proxmox_VE_Firewall#Standard_IP_set_.27management.27

 

[dietmar]

Hi,
the default ports are always open except you are explicit close them.

No, they are only open for the local network.

 

[h9k]

Yeah so the problem was that clustering broke down when I set the input policy to DROP.
Problem was, my system was missing the default local_network / cluster_network aliases. I added those and now it seems to work fine.

 

[Ovidiu]

@h9k: where/how did you add those?