Question to Firewall IP Rule

[19topgun93]

Goood evening,

I have a question about the Firewall in Proxmox. I have the attach file. I want the IPs of this site https://www.countryipblocks.net/acl.php blocked for Internet Security. After a certain size, the IP addresses that I can insert per section become smaller and smaller. Is there another way I can do this? I thought as a CIDR it would be easiest via IPset.

Best regrads

 

[oguz]

hi,

if you want to add ipset in bulk you can just edit the files directly:

find /etc/pve -name '*.fw'

/etc/pve/nodes/YOURNODE/host.fw <- host rules
/etc/pve/firewall/cluster.fw <- clusterwide rules

you should look at [0] when adding the sets in the file

hope this helps

[0]: https://pve.proxmox.com/wiki/Firewall#pve_firewall_ip_sets