iptables

  1. VM routing traffic from LAN to VPS via Wireguard is slow

    UBUNTU-VM acts as a router to route traffic over wireguard (UBUNTU-VM is within a proxmox VE). NAS is an old WD EX2, which is not on wireguard, traffic from it passes through the proxmox UBUNTU-VM. The problem is that bandwidth from NAS going outside to VPS is very slow, only 300KB/s (transfer...
  2. [SOLVED] Firewall rules seem to have no impact on LXC containers

    I'm trying to set up Proxmox VE firewall rules; except those rules don't seem to do anything on CT level. I had enabled firewalling at: Datacenter level PVE level CT's vNIC (net0) level CT level ^ The minute I enable firewalling completely, I can see that all the incoming connections are...
  3. Counting remote accessed hosts

    Hello! I own a hosting company and I often face the situation where my clients using weak passwords end up being broken and at the same time my VPSs become the source of scans on other hosting companies. I managed to block through Suricata the situation in which a client scans a certain IP...
  4. [SOLVED] Router on a stick with single public ip help needed!

    Edit: Solution Hi, I have for a couple of days tried to replicate in Proxmox my bare-metal Debian router setup that serves DHCP and DNS through dnsmasq for my LAN machines. Problem is that I can't get my Ubuntu container to connect to internet no matter what I put in /etc/network/interfaces...
  5. Port Forwarding

    Hiii guys, new Proxmox user here. One of those port forwarding questions which has come up already a couple of times, but still, something seems to be missing. I've installed proxmox 7.1-12 on a dedicated server (one public ip). Now I'm trying to setup ssh port forwarding to a VM. I've seen...
  6. [SOLVED] iptables rule to allow access from one VM (private ip) to second VM (public ip)

    Hello Who can help with understanding such question. I have two VM with private ip addresses. One of them have rules to allow access by several ports from outside to public ip of the Proxmox. So rules work - I have access to VM from outside. iptables -t nat -A PREROUTING -p tcp -d 116.XXX.XXX.99...
  7. bfwdd

    Suricata Integration / Firewall Iptables

    Hello everyone, according to WIKI the suricata integration take place under /etc/pve/firewall/<VMID>.fw, and the rule will be automatically added to the iptables . It is exactly my case however i am not receiving alerts at Suricata. this is how the rule looks like: 2 NFQUEUE all --...
  8. bfwdd

    Forward traffic to Suricata, NFQUEUE, PVEFW-IPS

    I am actually trying to link Pve-IPS output to suricata. I am running suricata using the NFQ mode and im sending traffic to suricata with the gateway-scenario using the following cmd: # iptables -I FORWARD -j PVEFW-IPS The problem is every time i restart the host the added rule is gone (-A...
  9. VMs/Guest Hosts cannot access the internet ( 2021 )

    So I have this set up: I can ping other VMS on the same network but cannot access the internet. a few days ago I could when I set up a VM bride for testing purposes but now I cannot I do think it is due to some routing issues any input would be recommended I do not know too much about...
  10. Setup Nat network on proxmox fail

    I tried to setup a new interface in /etc/network/interfaces and when I tried to make the new interface up, proxmox raise this error warning: vmbr2: post-up cmd 'iptables -t nat -A POSTROUTING -s '192.168.10.0/24' -o enp38s0 -j MASQUERADE' failed: returned 3 (iptables v1.8.7 (legacy): can't...
  11. iptables is not apply for NAT VM

    Hello, I tried to install Proxmox 6.4 on the new server. We created settings for the local IP to be after NAT (see spoiler settings of Host (Proxmox)). I want for a new VM with windows installed to allow access to RDP from external IP using the command on the Host (Proxmox) iptables -A...
  12. PBS iptables

    Hello, I have two questions to the PBS installation: Will a firewall be integrated in the future like in Proxmox VE? Does anyone have a recommendation for the iptables configuration? Thank you in advance Rafael
  13. POLL: Current Firewall Design, what is your ...

    This is a POLL thread in an attempt on covering all the models of firewall and Proxmox to help us better guage the future direction which we all collectively think that Proxmox should be supporting. Assumption must be made here for brevity of your reply: you make uses of Debian 10.6 and Proxmox...
  14. [SOLVED] PVE Firewall ignores traffic from public IP

    Hello, I use the firewall built into Proxmox which is great. On the private network (172.16.10.x ) the firewall works and blocks what is not explicitly opened (Input Policy: DROP, OUTPUT Policy: ACCEPT), but when I use a public IP, the firewall totally ignores the rules and all traffic on the...
  15. se4n_1

    Default Proxmox Firewall Settings

    Morning, So I would like to compartmentalize my containers in proxmox with the proxmox firewall. Currently in datacenter options I have: firewall=no If I modify this to firewall=yes with firewall options out ACCEPT and in ACCEPT in the firewall tab in the datacenter, is this the same rules as...
  16. No access to one of cluster nodes using port forwarding

    I have a cluster with two PVE nodes inside local network. I'm trying to set up access to PVE using port forwarding. Inside local network everything works fine as well as through VPN. From outside it only works to first PVE but the second one is unreachable. They have common firewall rules of a...
  17. [SOLVED] [WORKAROUND FOUND] Routing issues probably self-inflicted. Amateur needs help. Only for patient users.

    Hello everyone. Ugh... I'm afraid to even ask the question... Just to be fair - I am an amateur - I don't even know what I don't know... Ok so I am setting up proxmox but its "complicated". - Normally proxmox runs with LAN device as a main network (internet) interface - in my case its...
  18. [SOLVED] Docker breaks my Proxmox access

    I’m running Proxmox and a VM with a minimal debian OS. Everything worked fine until I installed docker and Portainer. Well, docker, Portainer and my containers work fine. But now my Proxmox is not accessable, not by GUI and not by SSH. I’ve read that docker could break the bridge as it uses...
  19. [TUTORIAL] ZeroTier + Proxmox PVE

    ZeroTier + Proxmox We have been using ZeroTier over a year, when it came time to use it with Proxmox, I wasted hours due to my desire to over-complicate things. This four step process will let you access your containers and VMs remotely via the ZeroTier D-WAN / VPN My goal is to configure...
  20. [TUTORIAL] Aussperrschutz, wenn man an der Proxmox Firewall (iptables) rumschraubt

    Wer kennt das nicht, man will die PVE Kiste securen und erstellt Rules in den iptables. Plötzlich hat man sich selber ausgesperrt. Ärgerlich und kann dann nur noch mittels Rescuemodus behoben werden. Bei grossen Kisten mit vielen VMs ist das nicht sonderlich toll. Habe mir ein Script...

About

The Proxmox community has been around for many years and offers help and support for Proxmox VE, Proxmox Backup Server, and Proxmox Mail Gateway.
We think our community is one of the best thanks to people like you!

Get your subscription!

The Proxmox team works very hard to make sure you are running the best software and getting stable updates and security enhancements, as well as quick enterprise support. Tens of thousands of happy customers have a Proxmox subscription. Get your own in 60 seconds.

Buy now!