Search results

Sorry to bump an old thread. I've read several of these now on the topic but can't seem to find a viable solution * https://forum.proxmox.com/threads/tls-on-pmg.62975/ * https://forum.proxmox.com/threads/ssl-for-tls.82952/ Jul 24 15:02:38 pochta2 postfix/smtp[8572]: Untrusted TLS connection...

Thank you for the reply. The first option would be ideal, but this is microsoft. It doesn't give many options. I will see about setting up a "rule" (filter in hotmail) to forward instead of redirecting. That should hopefully keep the envelope intact.

I'll preface by saying I am new to PMG. Forwarding to another email address is enabled in the hotmail account. It seems for most this work with spf enabled in PMG, but an email from openwrt.org failed. The log is pretty sparse, here's the sanitized lines. This is all that shows up for this...

^^Makes sense, but also seems simple enough to add another toggle under the disable. "Unmount share?" Selection of toggle becomes available if the disable button is checked.

Wow, going on 7 years. Is there a reason for the current implementation method?

Proxmox 7.2 From the web ui I have configured a cifs location for backup and iso purposes. I click enable under the general properties and it connects fine. After completion of task I select disable. The storage location is removed from the ui. Issuing mount command in console indicates the...

If the vmbrx interfaces have the firewall option checkmarked, then the fwbr interface will also need to have the "8" flag set. Not sure why one would have the proxmox host firewall enabled as *sense (or whatever firewall vm) is doing the firewalling.

I don't understand your comment, "but when I set the system configuration, as long as I restart pve, the original settings will be restored." If you want to be able to wol the proxmox host, add; @reboot /sbin/ethtool -s enp4s0 wol g To cron. This sets the wol flag for your management...

@leesteken Re post #2. I run my pve headless. Surprisingly it's been running quite well. If I do need to do something on the server, I will install a basic video. I guess I need to remember to edit that iommu option first, before making any changes.

Further testing has revealed an unfortunate side effect of this vlan0 use. Using virtio for both wan/lan interfaces results in significantly higher cpu usage. I can't compare apples/apples yet because I haven't gotten pf 23.01 to recognize eapol traffic when nic is in passthrough. However, this...

Progress... https://www.dslreports.com/forum/r33645618- I will create a more detailed post later with all the details some others can reproduce.

^^I can still get an ip in pfsense if I revert the network config so pf is doing the wpa auth. Also, reconnecting wan back to prod server, utm (where wan nic is passed through) was able to get an IP no problem. If the ont was the issue, I'd expect to NOT get an ip on one or both of the above vm's.

I did some more testing today on the test box. From scratch, got it to a state where wpa_sup auth worked within the pfsense guest. Then killed the daemon and re-enabled it on the host. It appears if wpa auth happens on the host, dhcp requests from the guest are not making it out. Tried using...

My apologies. There are 2 servers involved. I was doing the host wpa auth on a test box so as not to muck up the main one. On the main (production), utm has wan nic in pass through to sophos utm (suse linux based). Within utm nothing special at all is done with respect to vlan0. Literally...

Tried that. The wpa auth works on the host, but no dhcp on the guest. Vlan0 is passed. Looking at my working utm system, the request goes out untagged. Response comes in tagged vlan 0 priority 7. Wan nic is in passthrough mode to utm. With the proxmox wpa on host, with vlan0 enabled, the...

Take a look here: https://www.reddit.com/r/ATT/comments/g59rwm/comment/fskwgd7/ This appears to be exactly what I'm doing, but he makes no mention of the fwbr flag.

Aha! This makes perfect sense. This exchange is happening over a physical link in your case vs virtual in mine. I don't believe I ever used this method. Mainly started with the dumbswitch/rg, then went certs/wpa a year later in 2019.

Problem solved - hook scripts. https://forum.proxmox.com/threads/execute-host-command-after-starting-guest.125023/ I tested this and it does appear to work for settings the fwbr flag.

After some more research discovered the concept of hookscripts. There's several different states, for this purpose "POST-START" seemed most appropriate. Maybe there's a simpler more elegant way of doing this? The process involves the following 1) Enable snippets Datacenter, storage, local...

Running this command in current firewall (sophos utm, suse based) where wan nic is in passthrough to the vm. tcpdump -i eth2 port 67 or port 68 -n -e -A -vv Doing dhcp renew, shows outbound traffic NOT vlan0 tagged, inbound is vlan0 tagged. However, no vlan0 interface is actually defined...