[SOLVED] pve-firewall works on node but not on VM host

[jamespo]

Firewall works on the node but I cannot allow SMTP traffic through to my VM whether by group or a direct rule.
Strangely ssh works.

Firewall is enabled on the DC, on the node and on the VM & on VM network interface.

EDIT: Solved - the issue was a local firewall on the VM - firewalld, which doesn't give any output to "iptables -L" but still blocks packets!

If in doubt, debug with tcpdump through the stack.

 

[aaron]

Thanks for sharing what the problem was!

I am going ahead and marking this thread as solved. You can do that yourself in the future by editing the first post and selecting the prefix in the dropdown next to the title.