NPK's latest activity

  • N
    NPK replied to the thread Restrict PermitRootLogin to PVE.
    I was talking about prohibit-password, not no. Of course "no" is impossible with PVE.
  • N
    NPK replied to the thread PVE with antivirus.
    I am not convinced of the supreme benefit of adding an antivirus to a hypervisor; it is really more a question of ticking a box, yes. It can be F-Secure, ClamAV, or another one. I haven't seen any official statement from Proxmox on this subject...
  • N
    NPK replied to the thread Restrict PermitRootLogin to PVE.
    It's a solution, thanks. But modifying PermitRootLogin is OK for PVE health ?
  • N
    NPK replied to the thread Restrict PermitRootLogin to PVE.
    Thanks @sumanraic001 but I already have my users (with PVE authentication serveur or AD). The question is to deny root connection by SSH but let users still connect with their own accounts ; I can do it but my question is if PVE can have some...
  • N
    NPK replied to the thread Restrict PermitRootLogin to PVE.
    It's private IP, my bad. Nodes are on a different VLAN than users workstations (for example : 1.2.3.0/24 for nodes and 10.10.10.0/24 for workstations). Of course I can't block it with firewall rules, but... my users need to connect on nodes...
  • N
    NPK replied to the thread Restrict PermitRootLogin to PVE.
    Thanks. I understand that PVE uses root access for a lot of things. But, why PVE can't be working safely if I just restrict root SSH connection from outside the cluster ? The main goal is to deny users to connect with root SSH on cluster from...
  • N
    NPK replied to the thread PVE with antivirus.
    It's my opinion too, but I have to provide objective evidence to justify not installing antivirus. A clear statement from Proxmox would be ideal, but perhaps they don't see any real technical drawbacks.
  • N
    NPK replied to the thread PVE with antivirus.
    I need to install antivirus software on PVE unless I can provide evidence that it's not possible or recommended. Sorry I can't be more specific.
  • N
    NPK replied to the thread PVE with antivirus.
    WIth license, I meant "subscription support" ;-) The question is about any antivirus, not a specific one.
  • N
    Hi, Is it OK to restrict SSH PermitRootLogin to only PVE IP? Would this have an impact on how PVE works? The goal is to prevent direct root connection via SSH from the rest of the network. Match User root Address 1.2.3.* PermitRootLogin...
  • N
    Hi, Is there an official statement from Proxmox regarding the installation of antivirus software on PVE? Does this installation affect the license and support provided? Thanks!