Firewall and Security questions

[bughatti]

Does anyone know if it is possible to lock a client to just 1 vmbr. I have a module that controls the VM from my site but they have the option to change network connections to all available vmbr vlans I created.

I am also using nexenta as my storage but I only have 1 NFS mounted for all clients. Even though they have access to VNC console, do they have a way at all to access the datastore to see what else is in there and mess with others folders?

 

[bughatti]

Does anyone know if it is possible to lock a client to just 1 vmbr. I have a module that controls the VM from my site but they have the option to change network connections to all available vmbr vlans I created.

I am also using nexenta as my storage but I only have 1 NFS mounted for all clients. Even though they have access to VNC console, do they have a way at all to access the datastore to see what else is in there and mess with others folders?

Anyone at all?

 

[kotakomputer]

You may use Proxmox Firewall?
Allow VM to access IP of vmbr1 and drop other vmbr IPs.

 

[bughatti]

Kota, thanks for the response but I am unclear as to what setting you are talking about. I know I can select firewall on a nic setting of a VM but where would I block them being able to selectively change what vmbr i have under my datacenter. I will eventually have dozens.