Proxmox VE 8 - Unable to edit a VM firewall rule if "source" is a IP address.

Oct 26, 2021
2
2
8
Karlsruhe, Germany
Hi,

with pve 8.0.3 I am able to create a new firewall rule which uses a IP address as source via the web interface but I am unable to change such a rule.
I can only delete and re-create it with changed values.

The error message is:

Parameter verification failed. (400)
source: invalid ipset name '+undefined/undefined'

Which is as far as correct as there is no ipset given.;)

The simplest example is to create such a rule (Direction: in, Action: ACCEPT, source: IP address, Enabled: checked) as enabled an then trying to disable it.

It looks like the parameter verification lost the check for IP adresses somehow form VE 7 to VE 8.

The cluster is updated form VE 6 to 7 and now to 8, if that is of any interest.

Regards, Ralf
 
Hello.

To resolve this problem, navigate to Datacenter > Firewall > Alias

Then, create a named alias for your IP address.


prox_mox_alias.png

Afterwards, edit your firewall rule, and in the source field, you will see a list of aliases that you previously added in the Datacenter > Firewall > Alias section.


prox_mox_firewall_rule.png


I believe Proxmox should allow both types of information, either a fixed IP or an alias, since it already permits defining network addresses without the need to create aliases.
 
Last edited: