firewall

  1. T

    Problems with Proxmox + Port Knock

    Hello everyone, I'm trying to configure Proxmo with Port Knock so that I can access Proxmox together with Port Knock so that I can protect some Proxmox that I have on dedicated players, without running the risk of being left stranded, if necessary (currently I only release my fixed IPs, but...
  2. H

    Block DHCP to and from the Proxmox host, but allow DHCP between VMs/LXCs

    I try to replace my routers DHCP Server with the ISC Kea Server in a LXC. As I'm new to this, I want to try it on a few client LXCs first. For this I want to block all DHCP requests that would go to the router and all DHCP requests that could reach the new DHCP Server from the outside of the...
  3. B

    Proxmox LXC Container Connectivity Problem

    Hello! I have 2 proxmox LXC containers connected to a standard Linux bridge. The containers are running Ubuntu 24.04, the first container works great and has the same configuration as the second one except it is assigned a different static ip obviously. For whatever reason, on the second LXC...
  4. P

    [SOLVED] OpenVPN Outbound Traffic Problem

    Hey there! I have been scavenging the internet without a result for my problem - not even chatgpt could help... I have OpenVPN setup in an LXC Container in Proxmox and am able to use/connect to it with an external vpn-client, however the connected Client can't connect to any external or...
  5. J

    [SOLVED] Strange Problems on one Cluster Node

    Hello, I have a strange problem. I have a cluster running in a datacenter (Hetzner), and I'm monitoring it with Checkmk. The Checkmk server is also running at Hetzner; previously, it was running on a private IP for 10 days. Since I migrated, I am no longer able to ping or access the node from...
  6. J

    Firewall logs do not appear in the VM

    Hello, I hope you don't mind me reaching out, but I've set up a security group with rules that log as "info." However, these logs only appear in the node's logs and not in the VMs' logs. If you have any ideas for debugging, I'd greatly appreciate it.
  7. Z

    What are the best practices for managing several subnets?

    Hello, I would like to know what the recommendations are for managing subnets in a cluster of several proxmox nodes. Let's imagine the following scenario: I have 2 Proxmox nodes clustered in the network (192.168.100.0/24): The IP of node 1 is 192.168.100.10 The IP of node 2 is...
  8. A

    Confusing DNS & Remote Desktop Interactions

    With the Datacenter level firewall ON and the VM level firewall OFF: I can remote into my VM from a physical computer by its IP address: 192.168.xxx.101 I can remote into my VM from a physical computer by its name: VMWindows11 With the Datacenter level firewall ON and the VM level firewall ON...
  9. R

    [SOLVED] OPNsense kein DHCP über VLAN

    Hallo zusammen, ich bin der Verzweiflung nahe und hoffe daher auf Eure Expertise und Rat hier im Forum. ich ahb ein sehr ähnliches Problem wie bereits in diesem Thread von @Yann Decay beschrieben wird: https://forum.proxmox.com/threads/dhcp-funktioniert-nicht-%C3%BCber-opnsense.86723/page-2 -...
  10. G

    Problems with opening port on Proxmox Host

    Hello, I've been strugging for days trying to open a port for nginx on a Proxmox host. I've checked that iptables is in use and not nftables as I thought maybe there was some conflict between the two - My way of doing this was "iptables -V" and I received back "iptables v1.8.9 (legacy)" - from...
  11. S

    Strange Firewall issue(s)

    Hello everyone, I am at my wits end. After enabling firewalling briefly on my proxmox machine and going to sleep, I was awoken by my alarms blaring. My ARP cache has filled with garbage proxmox firewall MAC addresses: I flushed the cache but it was immediatelly but it was quickly refilled...
  12. F

    locked out, unsure where I messed up.

    so I'm pretty new to proxmox and virtualization in general. Home assistant brought me here and I've been loving it and diving deep into the dev world. we'll today I fucked up. running a single node on a mini pc host and has been working well except for a bit of noise from the fan when the cpu...
  13. D

    Is isolation of VM's, located in the same VLAN, possible?

    We have several VM's which are running on the same Proxmox cluster within the same VLAN. They all connect to the gateway, which is a separate firewall appliance.. Is it possible to isolate those VM's from each other, just having VM and firewall communicate, but communication between VM's is not...
  14. D

    [SOLVED] SDN wrt Microsegmentation

    I've been playing around with SDN with a goal to implement a form of microsegmentation and believe that what I'm after is not currently possible without some form of work around. (VMs with multiple NICs etc) Is someone able to let me know if there is plans for the following on the horizon or if...
  15. M

    SDN No DHCP address when Datacenter firewall is enabled.

    I have firewall enabled on the datacenter level. When setting up simple sdn with DHCP. Created a new VM, but DHCP address is not getting assigned to guest. If i disable the firewall, I am able to get a DHCP address without issue. Im assuming i need to add a firewall rule to allow, just not...
  16. J

    Forbide user's vm to make ddos attack

    Hello, I would like to know how to setup the proxmox firewall to block outgoing ddos attack nd to suspend the vm where the attack came from. Thank you for your help Jean B.
  17. M

    Connection error 595: No route to host, Hetzner

    Hello, I have a problem that I have not been able to find the solution to and I imagine it could be something related to the firewall since I cannot find another problem that could be happening unless it is a bottleneck. I have a cluster of 4 machines, 3 the same and 1 different, which is the...
  18. J

    How to enable/disable a VM's firewall from the command line?

    This is probably a simple brain-o on my part, but I'm not seeing a qm option (or other command line tool) for enabling/disabling the firewall for a VM. (Note, I'm not asking how to add the ,firewall=1 option to a network interface at VM creation time nor afterwards. That's documented in the qm...
  19. M

    Komische Firewall Logs

    Hallo, ich hab letztens bei meinen VMs und containern die Firewalls aktiviert. Mir ist nach kurzer zeit aufgefallen, dass es ein paar log einträge gibt, die ich mir nicht erklären kann. hier ist zum beispiel einer 104 7 tap104i0-IN 07/Jun/2024:01:08:26 +0200 policy DROP: IN=fwbr104i0...
  20. N

    SDN SNAT not working with cluster firewall enabled

    Hi all! I've been playing around with EVPN SDNs. I have SNAT enabled on some Vnets. After some ping tests on containers, 8.8.8.8 is unreachable only once enabling the datacenter firewall. All outbound traffic is accepted by default, not sure if EVPNs require inbound rules to the hosts in order...