X-Git-Url: https://git.proxmox.com/?p=pve-docs.git;a=blobdiff_plain;f=pve-firewall.adoc;h=ec0db307fd9b7ed7bb8434cdc2cccdbe7ee64277;hp=19d9766e8a8e0cf918e79e7397553c0789f26176;hb=20fa8c22083fc93b5dff296110c7b2226d781875;hpb=e300cf7dabefee4420ff2be46bf64d0c38a52d8a diff --git a/pve-firewall.adoc b/pve-firewall.adoc index 19d9766..ec0db30 100644 --- a/pve-firewall.adoc +++ b/pve-firewall.adoc @@ -25,7 +25,7 @@ ifndef::manvolnum[] include::attributes.txt[] endif::manvolnum[] -Proxmox VE Firewall provides an easy way to protect your IT +{pve} Firewall provides an easy way to protect your IT infrastructure. You can setup firewall rules for all hosts inside a cluster, or define rules for virtual machines and containers. Features like firewall macros, security groups, IP sets @@ -475,10 +475,11 @@ set it for the `default` interface configuration and enabling it explicitly on the interfaces which need it. This is also the case for other settings such as `forwarding`, `accept_ra` or `autoconf`. + Here's a possible setup: ----- -# /etc/sysconf.d/90-ipv6.conf +.File `/etc/sysconf.d/90-ipv6.conf` +---- net.ipv6.conf.default.forwarding = 0 net.ipv6.conf.default.proxy_ndp = 0 net.ipv6.conf.default.autoconf = 0 @@ -488,8 +489,8 @@ net.ipv6.conf.default.accept_ra = 0 net.ipv6.conf.lo.disable_ipv6 = 0 ---- +.File `/etc/network/interfaces` ---- -# /etc/network/interfaces (...) # Dual stack: iface vmbr0 inet static @@ -546,8 +547,8 @@ corresponding link local addresses. (See the <> section for details.) -Ports used by Proxmox VE ------------------------- +Ports used by {pve} +------------------- * Web interface: 8006 * VNC Web console: 5900-5999