Limit web interface on 8006 to just loopback?


New Member
May 25, 2023
I'm doing my first install of Proxmox on a public IP today. The first thing I did after it rebooted was copy /etc/hosts.allow to the machine to control ssh access. Me, another guy, and a VPN provider we use - just a few dozen IPs out of the four billion possible, there's no need to be horsing around trying to fend off ssh brute force scanners.

I've done Google and ChatGPT looking for how to get the web interface to bind to just localhost. There's various suggestions that involve messing with pveproxy, but none of the configs I've tried work.

I'm not interested in a firewall solution for this, I want something more deterministic. I'm going to configure this once and then never need to worry about it again, while firewall rules change periodically.


The Proxmox community has been around for many years and offers help and support for Proxmox VE, Proxmox Backup Server, and Proxmox Mail Gateway.
We think our community is one of the best thanks to people like you!

Get your subscription!

The Proxmox team works very hard to make sure you are running the best software and getting stable updates and security enhancements, as well as quick enterprise support. Tens of thousands of happy customers have a Proxmox subscription. Get yours easily in our online shop.

Buy now!