====== PVE Firewall ======

Important: If you enable the firewall, traffic to all hosts is blocked by default. Only exceptions is WebGUI(8006) and ssh(22) from your local network.

To use firewall:
  * enable it at Datacenter level (note default input policy is REJECT!)
  * Datacenter rules are propagated to all nodes
  * Node default input policy is DROP !