[pve-devel] firewall custom rules

VELARTIS Philipp Dürhammer p.duerhammer at velartis.at
Mon Sep 1 16:37:12 CEST 2014


The firewall rules will be flushed if I add them manually or with a script?
Is there any possibility to add this rules to the firewall?
I love the options of the new firewall so far. But y miss the possibility to add custom rules (like this one against brute force for ssh)

-----Ursprüngliche Nachricht-----
Von: Dietmar Maurer [mailto:dietmar at proxmox.com] 
Gesendet: Dienstag, 29. Juli 2014 06:30
An: VELARTIS Philipp Dürhammer; Andrew Thrift; pve-devel at pve.proxmox.com
Betreff: RE: firewall custom rules

> Is it possible to have rules like
> [CHAIN] -p tcp -m tcp --dport 22 -m state --state NEW -m recent --set 
> --name SSH --rsource -j ACCEPT [CHAIN]  -p tcp -m tcp --dport 22 -m 
> recent --update -- seconds 400 --hitcount 5 --rttl --name SSH 
> --rsource -j DROP
> 
> Some way to manually add rules?

No, there is currently no support for the 'recent' module.


More information about the pve-devel mailing list