<html><head><meta http-equiv="Content-Type" content="text/html charset=GB2312"><meta http-equiv="Content-Type" content="text/html charset=GB2312"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;"><div><div>hi, Alexandre</div><div><br></div><div>pve-firewall.log for vm101 net0 ,from vm103 net0, use ping.</div><div><br></div><div>101 7 tap101i0-IN 28/Jul/2014:15:49:17 +0800 policy DROP: IN=fwbr101i0 OUT=fwbr101i0 PHYSIN=fwln101i0 PHYSOUT=tap101i0 MAC=76:a4:04:1d:4f:be:ce:60:6c:fb:81:4f:08:00 SRC=172.16.4.103 DST=172.16.4.101 LEN=60 TOS=0x00 PREC=0x00 TTL=128 ID=1318 PROTO=ICMP TYPE=8 CODE=0 ID=1 SEQ=984</div><div><br></div><div># cat <a href="http://101.fw">101.fw</a> </div><div>[OPTIONS]</div><div><br></div><div>log_level_in: debug</div><div>enable: 1</div><div>policy_in: DROP</div><div>log_level_out: debug</div><div><br></div><div>[RULES]</div><div><br></div><div>IN ACCEPT -i net1 -source +test</div></div><div><br></div><div><div># cat <a href="http://103.fw">103.fw</a> </div><div>[OPTIONS]</div><div><br></div><div>log_level_in: debug</div><div>enable: 1</div><div>log_level_out: debug</div><div><br></div><div>[RULES]</div><div><br></div><div>IN ACCEPT -source +testnet</div></div><div><br></div><div><br></div><div><div># cat <a href="http://cluster.fw">cluster.fw</a> </div><div>[OPTIONS]</div><div><br></div><div>enable: 1</div><div><br></div><div>[IPSET testnet]</div><div><br></div><div>10.0.0.0/8</div><div>172.16.0.0/16</div><div>192.168.0.0/16</div><div><br></div><div>[RULES]</div><div><br></div><div>IN ACCEPT -source +testnet</div></div><div><br></div><div><div># pve-firewall simulate -from vm103 -to vm101 --dport 22</div><div>Test packet:</div><div> from : vm103</div><div> to : vm101</div><div> proto : tcp</div><div> dport : 22</div><div>ACTION: DROP</div></div><div><br></div><div><br></div><div><div>在 2014年7月28日，下午3:45，Alexandre DERUMIER <<a href="mailto:aderumier@odiso.com">aderumier@odiso.com</a>> 写道：</div><br class="Apple-interchange-newline"><blockquote type="cite"><span style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; float: none; display: inline !important;">can you provide firewall config files ?</span><br style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;"><br style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;"><span style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; float: none; display: inline !important;">/etc/pve/firewall/<vmid>.fw</span><br style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;"><span style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; float: none; display: inline !important;">/etc/pve/firewall/</span><a href="http://cluster.fw/" style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;">cluster.fw</a></blockquote></div><br></body></html>