[pve-devel] firewall custom rules
VELARTIS Philipp Dürhammer
p.duerhammer at velartis.at
Mon Sep 1 16:37:12 CEST 2014
The firewall rules will be flushed if I add them manually or with a script?
Is there any possibility to add this rules to the firewall?
I love the options of the new firewall so far. But y miss the possibility to add custom rules (like this one against brute force for ssh)
-----Ursprüngliche Nachricht-----
Von: Dietmar Maurer [mailto:dietmar at proxmox.com]
Gesendet: Dienstag, 29. Juli 2014 06:30
An: VELARTIS Philipp Dürhammer; Andrew Thrift; pve-devel at pve.proxmox.com
Betreff: RE: firewall custom rules
> Is it possible to have rules like
> [CHAIN] -p tcp -m tcp --dport 22 -m state --state NEW -m recent --set
> --name SSH --rsource -j ACCEPT [CHAIN] -p tcp -m tcp --dport 22 -m
> recent --update -- seconds 400 --hitcount 5 --rttl --name SSH
> --rsource -j DROP
>
> Some way to manually add rules?
No, there is currently no support for the 'recent' module.
More information about the pve-devel
mailing list