firewall

Hi, I have some VMs on my node and i'm using cloud-init to assign IPv4 to every VM. However it's possible to change IP from VM to IP of another VM. I want to block user being able to change IPv4 assigned by cloud-init, how the easiest I can do that? I was trying with ip filter but it didn't work.

Hi, on a PVE 7.4 cluster, with vmbr0 (vlan aware, stp off), connected to bond0 (2 physical interfaces), with firewall enabled at the cluster level, I have an issue when first opening connections. a VM protected (100) has a firewall policy in REJECT (so that connection errors are explicit) a VM...

Hello, I've been trying to isolate a Windows 11 VM from the internet and my LAN with the Proxmox firewall on the VM level. However I've been stuck trying to figure out why it is allowing inbound traffic from the whitelisted IPs but not outbound traffic to the whitelisted IPs. I can ping the VM...

Hi everyone, We are using Proxmox 7.2 as our hypervisor and using the Proxmox VPS Module on WHMCS 8.3 for the billing and provisioning automation. Recently, we added new VM template which is using Ubuntu 24.04 OS. Normally there is no problem when the VM is created via WHMCS, but we have...

Hello everyone, I'm trying to configure Proxmo with Port Knock so that I can access Proxmox together with Port Knock so that I can protect some Proxmox that I have on dedicated players, without running the risk of being left stranded, if necessary (currently I only release my fixed IPs, but...

I try to replace my routers DHCP Server with the ISC Kea Server in a LXC. As I'm new to this, I want to try it on a few client LXCs first. For this I want to block all DHCP requests that would go to the router and all DHCP requests that could reach the new DHCP Server from the outside of the...

Hello! I have 2 proxmox LXC containers connected to a standard Linux bridge. The containers are running Ubuntu 24.04, the first container works great and has the same configuration as the second one except it is assigned a different static ip obviously. For whatever reason, on the second LXC...

Hey there! I have been scavenging the internet without a result for my problem - not even chatgpt could help... I have OpenVPN setup in an LXC Container in Proxmox and am able to use/connect to it with an external vpn-client, however the connected Client can't connect to any external or...

Hello, I have a strange problem. I have a cluster running in a datacenter (Hetzner), and I'm monitoring it with Checkmk. The Checkmk server is also running at Hetzner; previously, it was running on a private IP for 10 days. Since I migrated, I am no longer able to ping or access the node from...

Hello, I hope you don't mind me reaching out, but I've set up a security group with rules that log as "info." However, these logs only appear in the node's logs and not in the VMs' logs. If you have any ideas for debugging, I'd greatly appreciate it.

Hello, I would like to know what the recommendations are for managing subnets in a cluster of several proxmox nodes. Let's imagine the following scenario: I have 2 Proxmox nodes clustered in the network (192.168.100.0/24): The IP of node 1 is 192.168.100.10 The IP of node 2 is...

With the Datacenter level firewall ON and the VM level firewall OFF: I can remote into my VM from a physical computer by its IP address: 192.168.xxx.101 I can remote into my VM from a physical computer by its name: VMWindows11 With the Datacenter level firewall ON and the VM level firewall ON...

Hallo zusammen, ich bin der Verzweiflung nahe und hoffe daher auf Eure Expertise und Rat hier im Forum. ich ahb ein sehr ähnliches Problem wie bereits in diesem Thread von @Yann Decay beschrieben wird: https://forum.proxmox.com/threads/dhcp-funktioniert-nicht-%C3%BCber-opnsense.86723/page-2 -...

Hello, I've been strugging for days trying to open a port for nginx on a Proxmox host. I've checked that iptables is in use and not nftables as I thought maybe there was some conflict between the two - My way of doing this was "iptables -V" and I received back "iptables v1.8.9 (legacy)" - from...

Hello everyone, I am at my wits end. After enabling firewalling briefly on my proxmox machine and going to sleep, I was awoken by my alarms blaring. My ARP cache has filled with garbage proxmox firewall MAC addresses: I flushed the cache but it was immediatelly but it was quickly refilled...

so I'm pretty new to proxmox and virtualization in general. Home assistant brought me here and I've been loving it and diving deep into the dev world. we'll today I fucked up. running a single node on a mini pc host and has been working well except for a bit of noise from the fan when the cpu...

We have several VM's which are running on the same Proxmox cluster within the same VLAN. They all connect to the gateway, which is a separate firewall appliance.. Is it possible to isolate those VM's from each other, just having VM and firewall communicate, but communication between VM's is not...

I've been playing around with SDN with a goal to implement a form of microsegmentation and believe that what I'm after is not currently possible without some form of work around. (VMs with multiple NICs etc) Is someone able to let me know if there is plans for the following on the horizon or if...

I have firewall enabled on the datacenter level. When setting up simple sdn with DHCP. Created a new VM, but DHCP address is not getting assigned to guest. If i disable the firewall, I am able to get a DHCP address without issue. Im assuming i need to add a firewall rule to allow, just not...

Hello, I would like to know how to setup the proxmox firewall to block outgoing ddos attack nd to suspend the vm where the attack came from. Thank you for your help Jean B.