Recent content by hendr1x

  1. H

    Firewall rule : Use IP range for source.

    Hello everyone, I'd like to allow access to a /24 ip address range. For example : 10.10.10.242-10.10.10.254. I tried all different formats and could not get it to work in the source field of proxmox firewall. Do I really have to enter in all IP addresses individually. That would be to be about...
  2. H

    Best/Easiest way to move VM between completely separate servers

    Hello, I have two dedicated servers that are running Proxmox CE, completely independent of each other. I would like to move my VMS between the two in the easiest way possible. They are all running Debian 12 web servers. I would appreciate any ideas on how to best do this. My plan was to sftp a...
  3. H

    Security Updates

    I didn't install any kernel's myself. However I'm not running any containers...only VMs. Ah ok...I saw this chart and assumed Debian was running a higher version : https://en.wikipedia.org/wiki/Linux_kernel_version_history Can I just squeeze in that last question about apt autoclean...
  4. H

    Security Updates

    Also...I'm asssuming running apt autoclean, autoremove and purge is a recommended?
  5. H

    Security Updates

    Ok...so seems like that work flow does not upgrade the kernel? I am inside a VM that has run all commands and rebooted twice yet it is still running an old kernel. root@server:~# hostnamectl Virtualization: kvm Operating System: Debian GNU/Linux 12 (bookworm) Kernel: Linux...
  6. H

    Security Updates

    Ok. So glad I asked I about this important stuff. Thanks again...I've got some work to do :)
  7. H

    Security Updates

    I prefer to do things via cli. So no need to run apt upgrade..., just apt update and apt dist-upgrade, then reboot. That will take care of proxmox. For the VMs (all are running Debian bookworm)..is the same rules?
  8. H

    Security Updates

    I haven't updated in a while but I have updated many times. I don't know when I've rebooted last...I know its happened but I never did it unless I had to. Ok, so it sounds like I need to setup a routine when I update, upgrade, dist-upgrade and reboot. I will also sign up for security...
  9. H

    Security Updates

    Rebooting is not currently part of my process. I can make it happen but that requires downtime of course and critical things are running on this server. I have never run dist-upgrade...I didn't even know about it honestly. To answer your questions : root@server:~# apt update Hit:1...
  10. H

    Security Updates

    I am currently setup running the no-subscription repo. And I do the normal apt update/upgrade. However this doesn't upgrade the kernel right? I'm not sure what is required for that. Also, 6.2.16 is not getting patched any longer so I'm not clear how that is going to help. Thanks for your...
  11. H

    Security Updates

    Hello everyone, I'm trying to learn about proper security procedure with proxmox. On my current server : root@server:~# hostnamectl Operating System: Debian GNU/Linux 12 (bookworm) Kernel: Linux 6.2.16-8-pve Architecture: x86-64 It seem's 6.2.16 had gone EOL one year...
  12. H

    Postfix not working = where are the logs?

    You likely don't have rsyslog installed. apt install rsyslog I was able to find what I needed via ‘journalctl -u postfix’. That let me learn that I was having an issue with how credentials were handled
  13. H

    Proxmox 8 Login : Fail2Ban not working

    I gave up and decided the best approach was to block access to the form via firewall.
  14. H

    Postfix not working = where are the logs?

    Hello everyone, I am trying to setup postfix to send me system emails via gmail exchange. I've had this setup without issue on proxmox 7. I am now running proxmox 8 fully updated. I set everything up. Unfortunateyl the following two commands (using proper email addresses) do not work. ```...
  15. H

    I don't understand what Firewall:Yes does on virtual machine?

    They explain it all in this thread. The VM is separate and requires all rules applied to it. Just put the security group on the VM as well as the datacenter.