firewall

  1. V

    IP filter list doesn't seem to get populated for containers

    Hello, so I have hit a bit of a problem with recently learned software defined networking I created DHCP zone and network by following tutorial from wiki (Setup Simple Zone With SNAT and DHCP) After that I changed network config of existing LXC containers to use newly created VNet with DHCP IP...
  2. S

    [SOLVED] Restrict PVE management interface access to specific IP on LAN

    Hey everyone, Been running Proxmox 8.x for a little over a month, loving the software. Hoping someone can help me out with firewall configuration…. I have decided the management interface and the VM network interface. Management interface is Bond0 (configured as LACP failover). I want to...
  3. F

    Block changing IP of VM when using cloud-init

    Hi, I have some VMs on my node and i'm using cloud-init to assign IPv4 to every VM. However it's possible to change IP from VM to IP of another VM. I want to block user being able to change IPv4 assigned by cloud-init, how the easiest I can do that? I was trying with ip filter but it didn't work.
  4. E

    [SOLVED] pve-firewall REJECT rule from other VM prevents connection on first try

    Hi, on a PVE 7.4 cluster, with vmbr0 (vlan aware, stp off), connected to bond0 (2 physical interfaces), with firewall enabled at the cluster level, I have an issue when first opening connections. a VM protected (100) has a firewall policy in REJECT (so that connection errors are explicit) a VM...
  5. L

    Only allowing whitelisted IPs with the Proxmox VE firewall

    Hello, I've been trying to isolate a Windows 11 VM from the internet and my LAN with the Proxmox firewall on the VM level. However I've been stuck trying to figure out why it is allowing inbound traffic from the whitelisted IPs but not outbound traffic to the whitelisted IPs. I can ping the VM...
  6. D

    [SOLVED] VM Firewall Rule Gone After Creating via WHMCS (Ubuntu 24.04)

    Hi everyone, We are using Proxmox 7.2 as our hypervisor and using the Proxmox VPS Module on WHMCS 8.3 for the billing and provisioning automation. Recently, we added new VM template which is using Ubuntu 24.04 OS. Normally there is no problem when the VM is created via WHMCS, but we have...
  7. T

    Problems with Proxmox + Port Knock

    Hello everyone, I'm trying to configure Proxmo with Port Knock so that I can access Proxmox together with Port Knock so that I can protect some Proxmox that I have on dedicated players, without running the risk of being left stranded, if necessary (currently I only release my fixed IPs, but...
  8. H

    Block DHCP to and from the Proxmox host, but allow DHCP between VMs/LXCs

    I try to replace my routers DHCP Server with the ISC Kea Server in a LXC. As I'm new to this, I want to try it on a few client LXCs first. For this I want to block all DHCP requests that would go to the router and all DHCP requests that could reach the new DHCP Server from the outside of the...
  9. B

    Proxmox LXC Container Connectivity Problem

    Hello! I have 2 proxmox LXC containers connected to a standard Linux bridge. The containers are running Ubuntu 24.04, the first container works great and has the same configuration as the second one except it is assigned a different static ip obviously. For whatever reason, on the second LXC...
  10. P

    [SOLVED] OpenVPN Outbound Traffic Problem

    Hey there! I have been scavenging the internet without a result for my problem - not even chatgpt could help... I have OpenVPN setup in an LXC Container in Proxmox and am able to use/connect to it with an external vpn-client, however the connected Client can't connect to any external or...
  11. J

    [SOLVED] Strange Problems on one Cluster Node

    Hello, I have a strange problem. I have a cluster running in a datacenter (Hetzner), and I'm monitoring it with Checkmk. The Checkmk server is also running at Hetzner; previously, it was running on a private IP for 10 days. Since I migrated, I am no longer able to ping or access the node from...
  12. J

    Firewall logs do not appear in the VM

    Hello, I hope you don't mind me reaching out, but I've set up a security group with rules that log as "info." However, these logs only appear in the node's logs and not in the VMs' logs. If you have any ideas for debugging, I'd greatly appreciate it.
  13. Z

    What are the best practices for managing several subnets?

    Hello, I would like to know what the recommendations are for managing subnets in a cluster of several proxmox nodes. Let's imagine the following scenario: I have 2 Proxmox nodes clustered in the network (192.168.100.0/24): The IP of node 1 is 192.168.100.10 The IP of node 2 is...
  14. A

    Confusing DNS & Remote Desktop Interactions

    With the Datacenter level firewall ON and the VM level firewall OFF: I can remote into my VM from a physical computer by its IP address: 192.168.xxx.101 I can remote into my VM from a physical computer by its name: VMWindows11 With the Datacenter level firewall ON and the VM level firewall ON...
  15. R

    [SOLVED] OPNsense kein DHCP über VLAN

    Hallo zusammen, ich bin der Verzweiflung nahe und hoffe daher auf Eure Expertise und Rat hier im Forum. ich ahb ein sehr ähnliches Problem wie bereits in diesem Thread von @Yann Decay beschrieben wird: https://forum.proxmox.com/threads/dhcp-funktioniert-nicht-%C3%BCber-opnsense.86723/page-2 -...
  16. G

    Problems with opening port on Proxmox Host

    Hello, I've been strugging for days trying to open a port for nginx on a Proxmox host. I've checked that iptables is in use and not nftables as I thought maybe there was some conflict between the two - My way of doing this was "iptables -V" and I received back "iptables v1.8.9 (legacy)" - from...
  17. S

    Strange Firewall issue(s)

    Hello everyone, I am at my wits end. After enabling firewalling briefly on my proxmox machine and going to sleep, I was awoken by my alarms blaring. My ARP cache has filled with garbage proxmox firewall MAC addresses: I flushed the cache but it was immediatelly but it was quickly refilled...
  18. F

    locked out, unsure where I messed up.

    so I'm pretty new to proxmox and virtualization in general. Home assistant brought me here and I've been loving it and diving deep into the dev world. we'll today I fucked up. running a single node on a mini pc host and has been working well except for a bit of noise from the fan when the cpu...
  19. D

    Is isolation of VM's, located in the same VLAN, possible?

    We have several VM's which are running on the same Proxmox cluster within the same VLAN. They all connect to the gateway, which is a separate firewall appliance.. Is it possible to isolate those VM's from each other, just having VM and firewall communicate, but communication between VM's is not...
  20. D

    [SOLVED] SDN wrt Microsegmentation

    I've been playing around with SDN with a goal to implement a form of microsegmentation and believe that what I'm after is not currently possible without some form of work around. (VMs with multiple NICs etc) Is someone able to let me know if there is plans for the following on the horizon or if...