How to setup firewall port limitations for containers and VM's

[slave2anubis]

Hello people!
I have a small favor to ask, can someone who has the knowledge explain how to setup a Proxmox firewall so that every container can only use the specified ports (ex. 80, 443, etc.)?

I have a bunch of containers running webserver's on them, and i want to increase security by limiting the open ports on each container so that if any one container gets compromised the attack surface is reduced on other containers and network.
My setup includes a DB container (MariaDB) where i host all the databases, a few containers for each website (Nginx & PHP), and a container for the reverse proxy (Nginx).

Thank you

 

[wolfgang]

Hi,

I would create at the datacenter level a security group and add the needed rules to this group.
Then you can use this group as a rule at the container