firewall

  1. S

    SSH Firewall rule does not work on server machine

    I enabled firewall on Datacenter, node and some VMs. Ping works but strange. If I start ping and disable rule during it pinging, it continues ping. If I stop ping and try again then it is not working. But that is not an issue for me. I can access my host machine with SSH no matter wat. I...
  2. D

    Enabling Firewall breaks connection to all VMs

    Hello, I have a proxmox server running 7.4-13. When I try to enable the firewall on datacenter level, all connections to my VMs break and I can't ping them. Even those VMs which have no firewall enabled in VM Firewall and Hardware settings. Also my NFS mount from my TrueNAS VM breaks...
  3. T

    Proxmox host can't reach the Internet - VM Firewall/gateway scenario

    Hi everyone, After a couple of days of struggling, reading the Internet, and watching tutorials on YT, I still couldn't figure out how to give Proxmox host access to the Internet via Gateway/Firewall guest. Please advise if this is even possible and/or where the problem is. Some info about the...
  4. T

    Proxmox Firewall Doesn't seem to work and errors in log

    I'm trying to start making use of the Proxmox Firewall at Node/VM/NIC level. I've enabled the firewall at datacenter and node level initially, but the rules I've put in place don't seem to take effect, and I'm also getting these lines repeatedly in my PVE logs: Jun 03 12:32:57 pve...
  5. N

    [SOLVED] WebUI PAM Zugang Einschränken / WebUI restrict PAM (root) Login

    Hallo zusammen, Ich möchte die WebUI über VPN für andere Erreichbar machen, damit diese Ihre VMs selbst verwalten können. Nun hab ich mir die Frage gestellt, ob es denn möglich ist den Root Zugriff auf die WebUI nur in einem bestimmten Netzwerk zuzulassen? Heimnetz: Root kann sich anmelden...
  6. S

    Arma 3 Server

    Hello! I'm trying to make an arma3 server that runs on proxmox on a windows VM. The server seams to be running in it's console, however the server does not show up on the server list. I have opened ports in the VMs firewall, however I am struggeling to open them in proxmox itself. The port I...
  7. C

    cluster.fw not inside /etc/pve/firewall ?

    Hello, I was following a video named "Proxmox VE Full Course: Class 11 - Integrated Firewall" in which the teacher was showing the location of the cluster.fw file to show its the spot where you would disable the firewall should you get stuck after enabling the firewall and locking yourself...
  8. S

    Firewall still allowing Ping after disabling ICMP rule

    So i'm currently learning proxmox on a mini pc at home, with the intention of deploying on a root server in the future. i was trying out the proxmox firewall function on datacenter and pve1 layer. i have a rule on the datacenter allowing tcp traffic on port 8006 for the web interface, same...
  9. R

    Firewall not working as Expected

    I have enabled Firewall on Datacenter, Node and VM level but it doesnt work fully. I disabled outgoing port 25 on my IP as shown in screenshot below but on port checker online it shows port 25 as open. I cant telnet into it still it shows open. I have enabled incoming macro mail in order for my...
  10. R

    Spam Received even after outgoing port 25 blocked

    Hello my clients are hosting mail servers and I want to block all outgoing emails for all my VM so i made firewall settings, at datacenter level, node level and security group and enabled it for all VMs For Datacenter its as follows For Node Level it is as follows For VM Level it is as...
  11. S

    Proxmox - Externer Zugriff aus dem Internet auf VMs, Firewall und Sicherheit - Fragen

    Hallo Zusammen, ich stehe im Moment total auf dem Schlauch. In großen Netzwerken gibt es in der Regel eine DMZ und in dieser immer eigene Hyper-Visor für spezielle VMs, welche von Extern (aus dem Internet) erreichbar sein sollen. Hier gibt es dann auch meisten größere Firewalls, welche den...
  12. P

    Unable to block 22 and 8006 traffic

    I'm following Jay's proxmox tutorial (https://www.youtube.com/watch?v=DNsLLrCgK0U&list=PLT98CRl2KxKHnlbYhtABg6cF50bYa8Ulo&index=12) and using exactly the same steps I receive different results: after turning on firewall both on datacenter and host level, I am not blocked. Both 8006 and 22 works...
  13. N

    Force all traffic in a bridge through router VM

    I have already searched for similar questions but wasn't able to find a satisfying answer (or maybe I just overlooked it). I have a VM with OPNsense that acts as a central firewall and router, which is connected to vmbr0 (WAN) and vmbr1 (LAN). There are multiple other VMs connected to vmbr1. I...
  14. U

    Unable to access My Proxmox GUI after changing Input Policy from Accept to Drop

    Hello, Please help me solve this issue. I had access to my Proxmox GUI interface. I was setting up firewall to allow a particular IP to access GUI. The only chande i made was to enable firewall and change Input Policy from Accept to Drop. Now i can access the GUI once more. I've try to follow...
  15. R

    Iptables inside LXC container not blocking anything

    I've been hitting my head to the brick wall that is iptables inside a Debian 11.3 container in Proxmox. I cannot seem to get it to block anything and there seems to be some contradicting discussions about if iptables should even work inside LXC. I do use Proxmox firewall as well, and it is...
  16. J

    Overlapping WAN's in firewall

    Hello This is currently my network configuration. I am using my public ip .116 for my PVE e, another public ip .118 as a NAT network for my VMs. The public ip .118 is connected to the firewall as WAN and the firewall then controls all the traffic. Now on the firewall I would like to also add...
  17. M

    Loading custom iptables rule on startup with post-up fails

    Hello everyone I have a custom firewall rule for a few VMs that I can't enter in the GUI. The most elegant way would be to load it directly at startup by "post-up" in the /etc/network/interfaces file. The rule looks like this: ip6tables --insert tap181i0-IN -m mac ! --mac-source...
  18. B

    Proxmox FW needed or not with an OPNsense VM?

    Hello everyone, I'm trying to make my own router/firewall with OPNsense as a VM in Proxmox. What's not clear to me is if I can let OPNsense connect to the internet directly, or if that put Proxmox at risk and thus I should add the Proxmox Firewall to be safe? In both cases Proxmox will be...
  19. G

    [SOLVED] Site-to-site-VPN (IPSec): Routingprobleme

    Hallo, ich habe es als Anfänger nach vielen Tagen endlich geschafft, auf einem Debian-11-basierten Container mit StrongSwan ein Site-to-site-VPN per IPSec zustande zu bringen. Auf Seite A habe ich routerseits (Ubiquiti DreamMachine Pro) ein Port-forward für 500 und 4500 auf die lokale IP des...
  20. C

    Fr: Refusé l'accès au réseau local pour ne pas pouvoir ping les machines

    Bonsoir, je voudrais empêché mon contenaire(VM) de pouvoir avoir accès a mon réseau local. J'ai essayer de faire des règles de pare-feu mais je galéré un peut. Si une personne pourrait m'aidé. Voici la configuration principale de mon proxmox et mon réseau: Ip proxmox : 192.168.1.62/24 Ip...

About

The Proxmox community has been around for many years and offers help and support for Proxmox VE, Proxmox Backup Server, and Proxmox Mail Gateway.
We think our community is one of the best thanks to people like you!

Get your subscription!

The Proxmox team works very hard to make sure you are running the best software and getting stable updates and security enhancements, as well as quick enterprise support. Tens of thousands of happy customers have a Proxmox subscription. Get yours easily in our online shop.

Buy now!