Strange Firewall issue(s)

sondzack

New Member
Dec 9, 2023
4
0
1
Hello everyone,
I am at my wits end. After enabling firewalling briefly on my proxmox machine and going to sleep, I was awoken by my alarms blaring.
My ARP cache has filled with garbage proxmox firewall MAC addresses:

1719230204889.png
I flushed the cache but it was immediatelly but it was quickly refilled with the same entries, all hitting the same hostname.
Naturally I came to check on my proxmox VM and noticed that a bunch of firewall MACs have gotten assigned IP addresses (most blocking out already existing IPs on my network).
1719229752247.png

I disabled my firewall immediately with pve-firewall stop but the firewall links remain. I disabled them in the Web-GUI (on the datacenter level, node level and on each individual VM, including the DHCP/NDP options
1719229894015.png
However even after a systemctl daemon-reload and systemctl restart networking.service, the firewall links remain online. I stopped, disabled and masked the pve-firewall.service did another daemon reload, but the firewall links remain up.
I upgraded my proxmox pve afterwards, after reading similar reports of an issue in Hetzner but the issue persists. The entire system is running in my homelab.

attached is my interfaces config file. I added the bridge-disable-learning 1 after reading about the similar Hetzner datacenter issues.
1719230278487.png

Any and all help is appreciated.
Kind Regards.
 

Attachments

  • 1719229701250.png
    1719229701250.png
    23.9 KB · Views: 2

About

The Proxmox community has been around for many years and offers help and support for Proxmox VE, Proxmox Backup Server, and Proxmox Mail Gateway.
We think our community is one of the best thanks to people like you!

Get your subscription!

The Proxmox team works very hard to make sure you are running the best software and getting stable updates and security enhancements, as well as quick enterprise support. Tens of thousands of happy customers have a Proxmox subscription. Get yours easily in our online shop.

Buy now!