Only allowing whitelisted IPs with the Proxmox VE firewall

Left6482

New Member
Sep 21, 2024
1
0
1
Hello,
I've been trying to isolate a Windows 11 VM from the internet and my LAN with the Proxmox firewall on the VM level.

However I've been stuck trying to figure out why it is allowing inbound traffic from the whitelisted IPs but not outbound traffic to the whitelisted IPs. I can ping the VM successfully from one of the whitelisted IPs but cannot ping them back from within the VM, meaning I can remote desktop into Windows with a whitelisted device but the VM cannot access anything from one of said devices.

Here is my Security group configuration:
Capture.PNG

Node firewall options:
Capture.PNG

IPset for vm_isolation,
where;
  • ProVE is the Proxmox VE IP
  • DNS is 9.9.9.9
  • gateway is the router's gateway IP
  • VM_101 and VM_102 are VMs on the same node as the Win11 VM
1726928102554.png

VM level firewall options:
1726928192239.png

VM's firewall where net0 is the network interface for the VM:
1726928213390.png


I'll appreciate any help :)
 

About

The Proxmox community has been around for many years and offers help and support for Proxmox VE, Proxmox Backup Server, and Proxmox Mail Gateway.
We think our community is one of the best thanks to people like you!

Get your subscription!

The Proxmox team works very hard to make sure you are running the best software and getting stable updates and security enhancements, as well as quick enterprise support. Tens of thousands of happy customers have a Proxmox subscription. Get yours easily in our online shop.

Buy now!