====== PVE Firewall ======

Important: If you enable the firewall, traffic to all hosts is blocked by default. Only exceptions is WebGUI(8006) and ssh(22) from your local network.

To use firewall:
  * enable it at Datacenter level (note default input policy is REJECT!)
  * Datacenter rules are propagated to all nodes
  * Node default input policy is DROP !


[[https://pve.proxmox.com/pve-docs/pve-admin-guide.html#_firewall_macro_definitions|27. Appendix F: Firewall Macro Definitions]]