Mastering Proxmox - Third Edition

Creating host firewall rules

Creating new rules for the host zone is identical to the rule creation process that we have already discussed in the Configuring the data center-specific firewall section earlier in this chapter. Besides creating rules from scratch, we can also assign predefined rules in the form of a security group to a node. We cannot create a new security group under the host Firewall menu, but we can assign it some predefined rules. For example, earlier in this chapter, we created a security group named webserver. If a Proxmox node is only going to host VMs used for web servers, then we can assign the security group webserver to that node, and all the rules will be cascaded into all the VMs in the host. Thus, we would save ...