I have a hetzner server, with one NIC, and 2 IP.
MY current network setup is:
Interfaces:
my pfSense VM has vmbr0(WAN) and vmbr2(LAN) connected to it.
on pfSense vmbr0/WAN, i have set the virtual MAC-address allowed by my 2nd IP.
In pfSense under WAN, i have set static ipv4, set the manual MAC-address.
IPv4 Upstream gateway is set to the gateway of the server (maybe this should be my main ip instead?)
Block bogon networks is checked.
Block private networks and loopback addresses is unchecked.
On the NAT outbound page i have:
And still, LAN MAC-addresses shows up on their logs.
According to another post that i could not find right now, they where talking about hetzner sends alot of traffic to everyone, so i put in the firewall rules they suggested to
mitigate this broadcasting.
EDIT: Found one of the threads i read about hetzner seems to send trafic to everyone on the same switch https://forum.proxmox.com/threads/mac-address-abuse-report.95656/
As @spirit says in post #4
It's quite possible that hertzner send you traffic, even if you don't have the mac address : if they don't known the mac address on their switches, it's possible that they are flooding packets on their network until this mac respond.
MY current network setup is:
Interfaces:
Code:
auto lo
iface lo inet loopback
auto eno1
iface eno1 inet manual
auto vmbr0
iface vmbr0 inet static
address 65.21.231.x/26
gateway 65.21.231.x
bridge-ports eno1
bridge-stp off
bridge-fd 0
auto vmbr2
iface vmbr2 inet static
address 10.10.10.254/24
bridge-ports none
bridge-stp off
bridge-fd 0
post-up echo 1 > /proc/sys/net/ipv4/ip_forwardmy pfSense VM has vmbr0(WAN) and vmbr2(LAN) connected to it.
on pfSense vmbr0/WAN, i have set the virtual MAC-address allowed by my 2nd IP.
In pfSense under WAN, i have set static ipv4, set the manual MAC-address.
IPv4 Upstream gateway is set to the gateway of the server (maybe this should be my main ip instead?)
Block bogon networks is checked.
Block private networks and loopback addresses is unchecked.
On the NAT outbound page i have:
And still, LAN MAC-addresses shows up on their logs.
According to another post that i could not find right now, they where talking about hetzner sends alot of traffic to everyone, so i put in the firewall rules they suggested to
mitigate this broadcasting.
EDIT: Found one of the threads i read about hetzner seems to send trafic to everyone on the same switch https://forum.proxmox.com/threads/mac-address-abuse-report.95656/
As @spirit says in post #4
It's quite possible that hertzner send you traffic, even if you don't have the mac address : if they don't known the mac address on their switches, it's possible that they are flooding packets on their network until this mac respond.
Last edited: