proxmox-mirrors/pve-docs
1
0
Fork 0
mirror of https://git.proxmox.com/git/pve-docs synced 2025-04-28 17:49:53 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

pve-firewall minor corrections

Browse Source 
Signed-off-by: Oguz Bektas <o.bektas@proxmox.com>
This commit is contained in:
Oguz Bektas 2019-02-14 16:18:07 +01:00 committed by Thomas Lamprecht
parent 118dceacc9
commit b323458439
1 changed files with 4 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
pve-firewall.adoc
View File

@ -231,8 +231,8 @@ Here are some examples:
IN SSH(ACCEPT) -i net0 IN SSH(ACCEPT) -i net0
IN SSH(ACCEPT) -i net0 # a comment IN SSH(ACCEPT) -i net0 # a comment
IN SSH(ACCEPT) -i net0 -source 192.168.2.192 # only allow SSH from 192.168.2.192 IN SSH(ACCEPT) -i net0 -source 192.168.2.192 # only allow SSH from 192.168.2.192
IN SSH(ACCEPT) -i net0 -source 10.0.0.1-10.0.0.10 # accept SSH for ip range IN SSH(ACCEPT) -i net0 -source 10.0.0.1-10.0.0.10 # accept SSH for IP range
IN SSH(ACCEPT) -i net0 -source 10.0.0.1,10.0.0.2,10.0.0.3 #accept ssh for ip list IN SSH(ACCEPT) -i net0 -source 10.0.0.1,10.0.0.2,10.0.0.3 #accept ssh for IP list
IN SSH(ACCEPT) -i net0 -source +mynetgroup # accept ssh for ipset mynetgroup IN SSH(ACCEPT) -i net0 -source +mynetgroup # accept ssh for ipset mynetgroup
IN SSH(ACCEPT) -i net0 -source myserveralias #accept ssh for alias myserveralias IN SSH(ACCEPT) -i net0 -source myserveralias #accept ssh for alias myserveralias
@ -303,7 +303,7 @@ explicitly assign the local IP address
---- ----
# /etc/pve/firewall/cluster.fw # /etc/pve/firewall/cluster.fw
[ALIASES] [ALIASES]
local_network 1.2.3.4 # use the single ip address local_network 1.2.3.4 # use the single IP address
---- ----
[[pve_firewall_ip_sets]] [[pve_firewall_ip_sets]]
@ -471,7 +471,7 @@ address are used. By default the `NDP` option is enabled on both host and VM
level to allow neighbor discovery (NDP) packets to be sent and received. level to allow neighbor discovery (NDP) packets to be sent and received.
Beside neighbor discovery NDP is also used for a couple of other things, like Beside neighbor discovery NDP is also used for a couple of other things, like
autoconfiguration and advertising routers. auto-configuration and advertising routers.
By default VMs are allowed to send out router solicitation messages (to query By default VMs are allowed to send out router solicitation messages (to query
for a router), and to receive router advertisement packets. This allows them to for a router), and to receive router advertisement packets. This allows them to