proxmox-firewall - switching and default rules

[der_baer]

hello,

im figuring out which firewall to use. im looking to proxmox-firewall. i was a bit suprised when turning it on, that 8006 accepts incoming connections by the default rules.

table inet proxmox-firewall {
set v4-dc/management {
type ipv4_addr
flags interval
auto-merge
elements = { 192.168.178.0/24 }
}

set v4-dc/management-nomatch {
type ipv4_addr
flags interval
auto-merge
}

it is not possible to block/edit those rules? there is no ipset preconfigured or visible in the gui. even when there is a rule created via the webgui?

 

[shanreich]

You can find the rules that are generated automatically in the documentation [1].
In order to override the allowed IPs you can create a management IPSet on the Datacenter layer and insert your custom IPs there, as described in [2].

[1] https://pve.proxmox.com/pve-docs/pve-admin-guide.html#pve_firewall_default_rules
[2] https://pve.proxmox.com/pve-docs/pv..._ip_set_span_class_monospaced_management_span