Mastering Proxmox - Third Edition

Configuration files of a firewall

Although the Proxmox firewall can be managed entirely from the Proxmox GUI, at times accessing the rules from the CLI may be necessary, especially when a cluster is locked out due to the misconfiguration of firewall rules. All firewall configurations and rules follow the same naming format, with the .fw extension. The firewall configuration and rule files are stored in two different directories for all three zones:

    /etc/pve/firewall/cluster.fw  

This is the data center configuration and zone rule file. All other data center-wide firewall information, such as security groups and IPSets, are also stored in this single file. We can enable or disable the data center-wide firewall by editing this configuration ...