Mastering Proxmox - Third Edition

Configuring the Datacenter firewall through the CLI

The Proxmox firewall can also be managed entirely through the CLI by editing the firewall configuration and rules files directly. The content of the configuration and rule files are laid out in a very specific format. The following screenshot shows the /etc/pve/firewall/cluster.fw file of the Datacenter zone after adding rules from the previous section:

As we can see, in the preceding screenshot, there are four segments in the firewall configuration file for the Datacenter zone. They are as follows:

    [OPTIONS]
    . . . . . . . . 
    [ALIASES]
    . . . . . . . . 
    [IPSET <name>]
    . . . . . . . .
    [RULES] ...