[pve-devel] [PATCH firewall/proxmox-ve-rs 0/2] fix ports in Ceph firewall macro

[pve-devel] [PATCH firewall/proxmox-ve-rs 0/2] fix ports in Ceph firewall macro

[Stefan Hanreich]

Ceph now uses a larger port range [1], so update the firewall macros in both
firewalls to reflect the new changes.

proxmox-ve-rs:

Stefan Hanreich (1):
  fix #7232: update ports for ceph macro

 proxmox-ve-config/resources/macros.json | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)


pve-firewall:

Stefan Hanreich (1):
  fix #7232: update ports for ceph macro

 src/PVE/Firewall.pm | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)


Summary over all repositories:
  2 files changed, 2 insertions(+), 2 deletions(-)

-- 
Generated by git-murpp 0.8.0

_______________________________________________
pve-devel mailing list
pve-devel@lists.proxmox.com
https://lists.proxmox.com/cgi-bin/mailman/listinfo/pve-devel

[pve-devel] [PATCH proxmox-ve-rs 1/1] fix #7232: update ports for ceph macro

[Stefan Hanreich]

The range of ports used by Ceph has changed since the creation of this
firewall macro. Update the macro so it reflects the new range of ports
used by Ceph [1].

[1] https://docs.ceph.com/en/latest/rados/configuration/network-config-ref/#mds-and-manager-ip-tables

Signed-off-by: Stefan Hanreich <s.hanreich@proxmox.com>
---
 proxmox-ve-config/resources/macros.json | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/proxmox-ve-config/resources/macros.json b/proxmox-ve-config/resources/macros.json
index f90fb38..58bed93 100644
--- a/proxmox-ve-config/resources/macros.json
+++ b/proxmox-ve-config/resources/macros.json
@@ -76,7 +76,7 @@
         "proto": "tcp"
       },
       {
-        "dport": "6800:7300",
+        "dport": "6800:7568",
         "proto": "tcp"
       }
     ],
-- 
2.47.3


_______________________________________________
pve-devel mailing list
pve-devel@lists.proxmox.com
https://lists.proxmox.com/cgi-bin/mailman/listinfo/pve-devel

[pve-devel] [PATCH pve-firewall 1/1] fix #7232: update ports for ceph macro

[Stefan Hanreich]

The range of ports used by Ceph has changed since the creation of this
firewall macro. Update the macro so it reflects the new range of ports
used by Ceph [1].

[1] https://docs.ceph.com/en/latest/rados/configuration/network-config-ref/#mds-and-manager-ip-tables

Signed-off-by: Stefan Hanreich <s.hanreich@proxmox.com>
---
 src/PVE/Firewall.pm | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/PVE/Firewall.pm b/src/PVE/Firewall.pm
index 93f8c34..92cbcaa 100644
--- a/src/PVE/Firewall.pm
+++ b/src/PVE/Firewall.pm
@@ -260,7 +260,7 @@ my $pve_fw_macros = {
         { action => 'PARAM', proto => 'tcp', dport => '6789' },
         # New port for protocol v2
         { action => 'PARAM', proto => 'tcp', dport => '3300' },
-        { action => 'PARAM', proto => 'tcp', dport => '6800:7300' },
+        { action => 'PARAM', proto => 'tcp', dport => '6800:7568' },
     ],
     'CVS' => [
         "Concurrent Versions System pserver traffic",
-- 
2.47.3


_______________________________________________
pve-devel mailing list
pve-devel@lists.proxmox.com
https://lists.proxmox.com/cgi-bin/mailman/listinfo/pve-devel

Re: [pve-devel] [PATCH firewall/proxmox-ve-rs 0/2] fix ports in Ceph firewall macro

[Friedrich Weber]

On 27/01/2026 11:25, Stefan Hanreich wrote:
> Ceph now uses a larger port range [1], so update the firewall macros in both
> firewalls to reflect the new changes.

ping -- sounds like something that could cause hard-to-debug issues once
triggered