meta data for this page
  •  

PVE Firewall

Important: If you enable the firewall, traffic to all hosts is blocked by default. Only exceptions is WebGUI(8006) and ssh(22) from your local network.

To use firewall:

  • enable it at Datacenter level (note default input policy is REJECT!)
  • Datacenter rules are propagated to all nodes
  • Node default input policy is DROP !