Recent content by thierrykaya

  1. T

    Firewall - conntrack question

    Ok, much appreciated your assistance though. Bye for now.
  2. T

    Firewall - conntrack question

    Hi, Sorry multitasking mangled my post :). I meant: Will setting up this rule at the iptables level,save this rule at the system level (OS)? Cheers, Reply
  3. T

    Firewall - conntrack question

    Hi, Will setting up this rule enable this filter at the PVE's firewall level? Cheers,
  4. T

    Arch Linux Container - network service faling

    Hi oguz, Thanks for getting back to me - I have moved on and install a VM instead, but I took note and will try again when I have time to play around with CTs. Cheers,
  5. T

    Setting up NIDS in VE, where put it in architecure and how redirect all trafic from/to Snort/Suricata

    Hi, Which one of these 3 options you reckon would fit in with Proxmox' security model and not increase its attack surface ? Cheers,
  6. T

    Arch Linux Container - network service faling

    PVE stack: 6.4-13 (running kernel: 5.4.128-1-pve) Arch Linux CT Kernel: Linux 5.4.128-1-pve x86_64 systemd version: systemd 248 (248-5-arch) /etc/pve/nodes/pve/lxc/CTID.conf feature: nesting=1 protection: 1 Hi, I am trying to spin a an Arch Linux CT but the the network service keeps on...
  7. T

    Firewall - conntrack question

    PVE stack: 6.4-13 (running kernel: 5.4.128-1-pve) How do I define a firewall rule, via the PVE firewall web frontend, that restricts incoming packets to tagged connections(conntrack) for a specific security group? A iptables rule equivalent would be: iptables -A INPUT -m conntrack --ctstate...