Proxmox VE firewall settings

[xbai]

你好 ！

我想知道如何在PVE系统上设置防火墙？通过配备PVE系统的服务器，登录网页后设置防火墙，要求服务器中的虚拟机不能访问百度网站，然后取消。

希望有具体的步骤。谢谢你。

2022.3.16

 

[fabian]

please post in English.

 

[xbai]

Hello !

I want to know how to set up firewall on PVE system ? By equipping the server with PVE system, set up a firewall after login the web page, access to the virtual machine in the server can not request Baidu website, and then cancel.

There are specific steps. Thank you.

2022.3.16

 

[fabian]

I'd suggest starting with https://pve.proxmox.com/pve-docs/pve-admin-guide.html#chapter_pve_firewall
you can dump the generate iptables rules with pve-firewall compile

 

[xbai]

Hi.

I see these, the concept of example firewall also has some understanding. Virtual machine IP access an address, remove IP access address.

Thank you.

2022.3.18

 

[xbai]

Hi.

Hello, I set the specifications in the firewall, open the firewall settings, but no SSH connection, now can not login to the host web, please how to operate next ?

Emergency ! ! !

Thank you

2022.3.18

 

[fabian]

the docs mention this:

If you enable the firewall, traffic to all hosts is blocked by default. Only exceptions is WebGUI(8006) and ssh(22) from your local network.

if you don't have access to another host in the local network, you need to boot using some sort of rescue mode / live CD and temporarily mask the pve-firewall service.

 

[xbai]

Hi.

If firewall is enabled, all host traffic will be prevented by default. The only exceptions are WebGUI ( 8006 ) and ssh ( 22 ) from local networks.
I still need to ban access to an address, you can access the address, so how should I operate in the state of reopening the firewall will need SSH connection ? How to achieve the previous requirements after connecting SSH ?

You can give me a detailed step.

Thank you.

2022.3.18

 

[fabian]

I don't understand the question. you need to define who has access to what using firewall rules - how those work and are zoned is described in the documentation I linked..