datacenter firewall oddity

I have a four node Proxmox 8.3.5 cluster. Just turning on the datacenter firewall for the first time.

Applicable bridges:
vmbr0 default, public network
vmbr2 private VM network

Default firewall options are set.

Rule 1, in, accept from specific public IPs to vmbr0 SSH and GUI at 8006.
works

Rule 2, in, accept vmbr2 from source all to destination all
only works from IPs on the same subnet

Remote subnet works to vmbr0 using public IP.

Remote subnet does not...

Read more