Commonly-used firewall CLI commands

Although almost all firewall configurations can be performed through the Proxmox GUI, sometimes it may be necessary to perform certain tasks through a CLI. In this section, we are going to see some commands that can be used to manage the Proxmox firewall.

Getting ready

Log in to the Proxmox node using SSH, or directly from a console, as a root or with any other administrative privilege.

How to do it...

Here are some of the CLI commands to manage the Proxmox VE firewall:

1. To start a firewall service:

   # pve-firewall start
   

2. To stop a firewall service:

   # pve-firewall stop
   

3. To check the status of a firewall service:

   # pve-firewall status
   

4. To view the generated iptables rules:

   # iptables-save
   

5. To edit a cluster-specific firewall:

   # nano /etc/pve/firewall/cluster.fw
   

6. To edit a host-specific firewall:

   # nano /etc/pve/nodes/<node_name>/host.fw
   

7. To edit a VM-specific firewall:

   # nano /etc/pve/firewall/<vm_id>.fw
   

There's more…

For the official Proxmox Wiki on firewalls...