Proxmox VE 8 - Unable to edit a VM firewall rule if "source" is a IP address.


New Member
Oct 26, 2021
Karlsruhe, Germany

with pve 8.0.3 I am able to create a new firewall rule which uses a IP address as source via the web interface but I am unable to change such a rule.
I can only delete and re-create it with changed values.

The error message is:

Parameter verification failed. (400)
source: invalid ipset name '+undefined/undefined'

Which is as far as correct as there is no ipset given.;)

The simplest example is to create such a rule (Direction: in, Action: ACCEPT, source: IP address, Enabled: checked) as enabled an then trying to disable it.

It looks like the parameter verification lost the check for IP adresses somehow form VE 7 to VE 8.

The cluster is updated form VE 6 to 7 and now to 8, if that is of any interest.

Regards, Ralf

To resolve this problem, navigate to Datacenter > Firewall > Alias

Then, create a named alias for your IP address.


Afterwards, edit your firewall rule, and in the source field, you will see a list of aliases that you previously added in the Datacenter > Firewall > Alias section.


I believe Proxmox should allow both types of information, either a fixed IP or an alias, since it already permits defining network addresses without the need to create aliases.
Last edited:


The Proxmox community has been around for many years and offers help and support for Proxmox VE, Proxmox Backup Server, and Proxmox Mail Gateway.
We think our community is one of the best thanks to people like you!

Get your subscription!

The Proxmox team works very hard to make sure you are running the best software and getting stable updates and security enhancements, as well as quick enterprise support. Tens of thousands of happy customers have a Proxmox subscription. Get yours easily in our online shop.

Buy now!