[PVE-User] Firewall Proxmox Host

[Måns Åman]

Hello!

 

Interesting!

 

My only uncertainties is to install Proxmox with all the complex software on the same hardware as the firewall. How do I know that none of the programs by any means is possible to reach from internet?

 

Otherwise I am very satisfied with the configuration!

 

/Måns

 

 

From: Fábio Rabelo [mailto:fabio at fabiorabelo.wiki.br] 
Sent: den 22 maj 2012 22:18
To: Måns Åman
Cc: pve-user at pve.proxmox.com
Subject: Re: [PVE-User] Firewall Proxmox Host

 

Plus one here !

I am using Shorewall in every Linux system I put up for more then 10 years. no problems at all ...


Fábio Rabelo




2012/5/22 Måns Åman <mans.aman at riverman.com>

Hi,

I'm using Shorewall which actually is a front for iptables. You can use DNAT
with private IP-addresses or using Proxy ARP
(http://en.wikipedia.org/wiki/Proxy_ARP) with public IPs directly on VMs. My
choice was to use proxy arp. It works great but how secure I can't say.
Obvious it's MUCH better with a hardware firewall in front of  Proxmox...

/Måns

-----Original Message-----
From: pve-user-bounces at pve.proxmox.com
[mailto:pve-user-bounces at pve.proxmox.com] On Behalf Of Christian Cartwright
Sent: den 22 maj 2012 20:21
To: pve-user at pve.proxmox.com
Subject: [PVE-User] Firewall Proxmox Host

Hello,

>From what I can gather, the proxmox host doesn't come pre-configured with an
enabled firewall.

Am I correct?

What firewall options are people using and finding to work well with their
setup and the virtual machines?

Thank you!
Christian

Sent from my iPhone
_______________________________________________
pve-user mailing list
pve-user at pve.proxmox.com
http://pve.proxmox.com/cgi-bin/mailman/listinfo/pve-user


-----
No virus found in this message.
Checked by AVG - www.avg.com
Version: 2012.0.2176 / Virus Database: 2425/5015 - Release Date: 05/22/12

_______________________________________________
pve-user mailing list
pve-user at pve.proxmox.com
http://pve.proxmox.com/cgi-bin/mailman/listinfo/pve-user





No virus found in this message.
Checked by AVG - www.avg.com
Version: 2012.0.2176 / Virus Database: 2425/5015 - Release Date: 05/22/12

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.proxmox.com/pipermail/pve-user/attachments/20120522/8e46dcef/attachment.htm>