Proxmox subskription update and firewall

[MadMarvin]

Hello together,

I got a problem with my subskription update in regards to firewall rules from an external firewall.
If I activate the external firewall I can't get the update, but the strange thing is, that no traffic coming from my node (OUTGOING) is blocked, it is all accepted.

All the other things are working, I can ping shop.proxmox.com with IPv4 and IPv6, I can update the repositories, but only the subskription is not updated and times out.

Does someone know which Port I have to open, to get sure I can update my subskription?

All what I read didn't help.

Thanks


Martin

 

[aaron]

Is the node able to connect to shop.proxmox.com via https (port 443) and is the firewall not breaking the encryption with its own certificate?

If you have further issues, please open a ticket at our technical support portal (https://my.proxmox.com). There we can take a closer look at what might go wrong. The forum is not the best place to share potentially sensitive infos

 

[MadMarvin]

Well, it looks like it's my own problem, even I did not find the issue yet, but the connection to shop.proxmox.com on https times out, when the firewall is in use.

root@server:~# wget https://shop.proxmox.com
--2026-02-12 18:14:50-- https://shop.proxmox.com/
Resolving shop.proxmox.com (shop.proxmox.com)... 2a01:7e0:0:424::2, 79.133.36.249
Connecting to shop.proxmox.com (shop.proxmox.com)|2a01:7e0:0:424::2|:443... failed: Connection timed out.

 

[fstrankowski]

Does it work when you stop your PVE-Firewall ( systemctl stop pve-firewall ) ? Usually outgoing connections are always allowed, even with the firewall enabled (and E/R incoming connections aswell).