[pve-devel] [PATCH proxmox{-ve-rs, -firewall} 0/4] Fix ipfilters in proxmox-firewall

Stefan Hanreich s.hanreich at proxmox.com
Thu Sep 25 12:05:05 CEST 2025


This patch series addresses two issues with ipfilters:

* containers would have the wrong CIDR inserted into the auto-generated ipfilter
  ipsets
* The nomatch logic isn't working correctly, due to wrong inversion of logic,
  leading to ipfilters not working at all

Including the rustfmt patch here as well, instead of separately since we touch
some of the imports that get changed there - leading to conflicts on applying
otherwise.

proxmox-ve-rs:

Stefan Hanreich (1):
  config: guest: store network devices in BTreeMap

 proxmox-ve-config/src/guest/vm.rs | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)


proxmox-firewall:

Stefan Hanreich (3):
  run rustfmt
  ipfilter: fix wrong entries for containers
  fix #6336: fix ipfilter matching logic

 proxmox-firewall/src/config.rs                |   6 +-
 proxmox-firewall/src/firewall.rs              |  16 +-
 proxmox-firewall/src/object.rs                |   6 +-
 proxmox-firewall/src/rule.rs                  | 155 +++++--
 proxmox-firewall/tests/input/100.conf         |   1 +
 .../integration_tests__firewall.snap          | 416 ++++++++++++++++++
 6 files changed, 559 insertions(+), 41 deletions(-)


Summary over all repositories:
  7 files changed, 563 insertions(+), 45 deletions(-)

-- 
Generated by git-murpp 0.8.0



More information about the pve-devel mailing list