firewall

  1. S

    Syncing IP's from fail2ban

    I have been testing my script to copy fail2ban log files to Proxmox firewall and have managed to make it work... one time :) cat /root/bin/banned2proxmox.sh #!/bin/bash # # Sync fail2ban log files from client servers rsync -a root@vm1.ic4.eu:/var/log/fail2ban.log /root/bin/fail2ban-vm1.log...
  2. M

    Firewall: Inside or Outside

    Good Morning, currently i'm messing around with my local networks. I decided to add a DHCP Server and an option to reverse proxy some parts of my local net (green, blue) to campus (red) access. I have followed some youtube tutorials (german). Unfortunately, i can't get access to the pfsense...
  3. M

    Possible bug when renaming a security group

    Hello When I rename a firewall security group (on the cluster/dc level), it won't get renamed on the VM level and thus the security group no longer applies to that VM. Is that a bug or intended behaviour? Thanks.
  4. S

    Firewall-Problem

    Hallo, Ich scheine ein Firewall-Problem zu haben. Ich habe die Anwendung Passbolt (https://www.passbolt.com/) in einer VM laufen. Diese hat zwei IPs, eine IPv4 und eine IPv6. Freigegeben habe ich die beiden Web-Ports 80 und 443 mit dem Web-Makro. Zusätzlich gibt es noch eine Security-Group mit...
  5. D

    run mikrotik routeros on proxmoxve

    Hello ,Has anyone successfully run mikrotik routeros in Proxmox VE? I can't get mikrotik routeros vm to work in Proxmox VE host with firewall My steps are as follows: 1. disable Proxmox VE firewall 2. create mikrotik routeros vm in Proxmox VE. 3. Bind the ip address in mikrotik routeros vm...
  6. A

    PVE V-Lan + Firewall Einstellungen

    Hallo zusammen, ich möchte gerne meine Hardware Firewall auf einer VM auslagern und bräuchte mal etwas Hilfe dabei. Nach einem Tutorial habe ich jetzt die V-Lan Einstellungen eingerichtet: eno1 läuft an einen Netgear Switch und enp5s0 würde dann an das Modem laufen. Der Port 9 am Switch...
  7. M

    firewall on or off?

    If I look at Firewall -> Options on the Datacenter, Firewall is "No". This is consistent with the docs at https://pve.proxmox.com/pve-docs/chapter-pve-firewall.html#pve_firewall_cluster_wide_setup If I look at each node individually, Firewall is "Yes". I see no /etc/pve/firewall/cluster.fw and...
  8. C

    How to allow broadcase VM IP in PVE Cluster Firewall

    Hi, Guys, I just enable the PVE Cluster Firewall , and found there is one default rules on Chain PVEFW-smurfs and PVEFW-smurflog blocked some of broadcast network packages, it me caused my load balancer IP setup in VM encounter issue, could any one tell how can I disable this rules or modify it...
  9. M

    Denying the VM Access to the LAN

    What im trying to achieve is to have a VM that has no way of communicating with the rest of the devices on the LAN. The configuration below seems to work but i wanted some of your thoughts on it. My aim to have the VM accessible by another person using a remote tool (e.g., AnyDesk) but prevent...
  10. S

    how to let network traffic mirror to guest os using linux bridge(port mirroring)?

    pve host:has network traffic. vmid=102, guest os: config bridge to vmbr4, but cant get network traffic. why?
  11. F

    FTP Problem Firewall

    Moin, mir zerbricht ein Problem den Kopf. Ich bin zwar vom Fach (IT-Systemelektroniker) aber ich finde den Fehler nicht bei meinem Homeserver. Habe die Proxmox Firewall so konfiguriert das nur http und https erlaubt sind. Funktioniert soweit. In der Fritzbox sind auch die Weiterleitungen...
  12. N

    windows firewall is greyed out

    Hi, I noticed my windows firewall service in the VM is not running and it is even greyed out, so I cannot start it. Is this a Proxmox thingy??
  13. P

    [SOLVED] Firewall rules seem to have no impact on LXC containers

    I'm trying to set up Proxmox VE firewall rules; except those rules don't seem to do anything on CT level. I had enabled firewalling at: Datacenter level PVE level CT's vNIC (net0) level CT level ^ The minute I enable firewalling completely, I can see that all the incoming connections are...
  14. J

    Allow ping among LXC in the same private network

    Hey everyone! I have read the PVE Firewall documentation plus a bunch of posts on these forums and, if I have understood correctly, there is no way to configure a single rule allowing ping among all LXC in the nodes of a Proxmox 7 cluster as rules at the datacentre level don't apply to...
  15. R

    structuring network - proxmox and pfsense

    Hi, i am restructuring our proxmox cluster network and i have some doubts and requests for suggestions that i expose below My scenario is as follows (1) two public IP ports (untagged vlan) on different servers (2) seven ports (tagged vlan) (3) I don't have direct access to the switch of (1)...
  16. M

    proxmox firewall flow diagram

    Hello everyone, Guys, I'm still trying to figure out what is the best way to configure proxmox firewall, I have been using iptables for long time, but I feel crazy when looking and trying to understand all relations in proxmox node firewall. Do you have any diagram to get more clear view how...
  17. S

    I cannot reach the VMs in the cluster subnet

    Hi, I have installed proxmox on an OVH cloud, following a restart of the cluster I can no longer reach the VMs of one of my subnets. In practice I have a vm that has the wan in the subnet 192.168.3.x / 24 and from the cluster it is not reachable. below I am attaching the configurations set on...
  18. J

    Restrict access to LAN

    I'm experimenting with the Security Group feature for the first time. I've read the documentation but can't quite put my finger on it... I have a KVM running LMDE and want it to be able to access the internet, but not any devices on the LAN. The use case is to give users linux virtual machines...
  19. S

    [SOLVED] VMs cannot resolve domains while connected to virtualized OPNsense

    Hello all, I virtualize my firewall via OPNsense, and previously had it set up using Hyper-V core. I recently began the move to Proxmox, but have been struggling with a couple issues. Note, I am not necessarily the most experienced in networking, as most of my knowledge is self-taught. For...
  20. A

    [SOLVED] ProxMox OpenVPN cannot connect

    First I would like to apologize for my English. I have server with installed ProxMox 7.1-10 and maked CT from template debian-10-turnkey-openvpn_16.1-1_amd64.tar.gz. The server has 4 IP's, configured PREROUTING and POSTROUTING nat rules for translate network from vmbr0 to vmbr1 and reverse. #...

About

The Proxmox community has been around for many years and offers help and support for Proxmox VE, Proxmox Backup Server, and Proxmox Mail Gateway.
We think our community is one of the best thanks to people like you!

Get your subscription!

The Proxmox team works very hard to make sure you are running the best software and getting stable updates and security enhancements, as well as quick enterprise support. Tens of thousands of happy customers have a Proxmox subscription. Get yours easily in our online shop.

Buy now!