Recent content by Jonesy

  1. J

    How do I send FW logs to a remote rsyslog server?

    I forgot about the imfile module. Adding this to my rsyslog.conf worked: $ModLoad imfile $InputFileName /var/log/pve-firewall.log $InputFileTag pvefw $InputFileStateFile stat-pvefw $InputFileSeverity info $InputFileFacility local3 $InputRunFileMonitor local3.* @<remotesyslogIP>:<port> and...
  2. J

    Proxmox VE firewall delay

    @dqq what if you give it an internal bridge, then switch it later? Or give it a VLAN that does not allow traffic, then switch it later? Would either of those work without re-creating the NIC? Just some ideas. Many times when setting up a CT, I assign it to my storage VLAN, then after everything...
  3. J

    Proxmox VE firewall delay

    You also might want to select the advanced button when adding the NIC, and uncheck the "connected" button. That way your NIC is not connected to the network yet. Create your FW rules, then go back to connect the NIC to the network. This is my process for VMs, though I have not tested to see if...
  4. J

    How do I send FW logs to a remote rsyslog server?

    I am trying to send my FW logs to a remote syslog server on PM V6.1. I added a "*.*" entry at the bottom of rsyslog.conf and that seems to work for most items, including a stop/start of the pve-firewall service itself. The logged FW entries only go into /var/log/pve-firewall.log on the local...