diff --git a/docs/resources/virtual_environment_cluster_firewall_security_group.md b/docs/resources/virtual_environment_cluster_firewall_security_group.md
index 157df22a..510b9043 100644
--- a/docs/resources/virtual_environment_cluster_firewall_security_group.md
+++ b/docs/resources/virtual_environment_cluster_firewall_security_group.md
@@ -46,7 +46,7 @@ resource "proxmox_virtual_environment_cluster_firewall_security_group" "webserve
 - `comment` - (Optional) Security group comment.
 - `rule` - (Optional) Firewall rule block (multiple blocks supported).
     - `action` - (Required) Rule action (`ACCEPT`, `DROP`, `REJECT`).
-    - `type` - (Required) Rule type (`in`, `out`).
+    - `type` - (Required) Rule type (`in`, `out`, `forward`).
     - `comment` - (Optional) Rule comment.
     - `dest` - (Optional) Restrict packet destination address. This can refer to
           a single IP address, an IP set ('+ipsetname') or an IP alias
diff --git a/docs/resources/virtual_environment_firewall_rules.md b/docs/resources/virtual_environment_firewall_rules.md
index a3219b5b..39d56eae 100644
--- a/docs/resources/virtual_environment_firewall_rules.md
+++ b/docs/resources/virtual_environment_firewall_rules.md
@@ -62,7 +62,7 @@ resource "proxmox_virtual_environment_firewall_rules" "inbound" {
     The provider supports two types of the `rule` blocks:
     - A rule definition block, which includes the following arguments:
         - `action` - (Required) Rule action (`ACCEPT`, `DROP`, `REJECT`).
-        - `type` - (Required) Rule type (`in`, `out`).
+        - `type` - (Required) Rule type (`in`, `out`, `forward`).
         - `comment` - (Optional) Rule comment.
         - `dest` - (Optional) Restrict packet destination address. This can
             refer to a single IP address, an IP set ('+ipsetname') or an IP
diff --git a/proxmoxtf/resource/firewall/rules.go b/proxmoxtf/resource/firewall/rules.go
index 894f5c64..7df43f51 100644
--- a/proxmoxtf/resource/firewall/rules.go
+++ b/proxmoxtf/resource/firewall/rules.go
@@ -78,9 +78,9 @@ func Rules() *schema.Resource {
 		},
 		mkRuleType: {
 			Type:             schema.TypeString,
-			Description:      "Rules type ('in', 'out')",
+			Description:      "Rules type ('in', 'out', 'forward')",
 			Optional:         true,
-			ValidateDiagFunc: validation.ToDiagFunc(validation.StringInSlice([]string{"in", "out"}, true)),
+			ValidateDiagFunc: validation.ToDiagFunc(validation.StringInSlice([]string{"in", "out", "forward"}, true)),
 		},
 		mkRuleComment: {
 			Type:        schema.TypeString,