Updated environment

2026-07-21 23:14:20 +00:00
parent 8c5b76cb15
commit 04d1e63f0a
9 changed files with 548 additions and 5 deletions
@@ -26,6 +26,13 @@ policy_out: ACCEPT
 IN ACCEPT -source +mgmt -p tcp -dport 8006 -log nolog
 IN ACCEPT -source +mgmt -p tcp -dport 22 -log nolog

+# ICMP echo (ping) from the management network - diagnostic convenience
+# only, nothing else depends on it. Without this, policy_in DROP silently
+# eats ping while SSH/web UI keep working - looks like an outage during
+# troubleshooting when the host is actually fine. See
+# docs/06-pve-test-wifi-network.md for a case this caused real confusion.
+IN ACCEPT -source +mgmt -p icmp -icmp-type echo-request -log nolog
+
 # Stage 2: Corosync (cluster quorum) - uncomment once node 2/3 join and
 # the corosync network/VLAN exists.
 # IN ACCEPT -source <COROSYNC_CIDR> -p udp -dport 5404:5405 -log nolog