[pve-devel] DANGEROUS: SYN FLOOD - PVE FIREWALL AND HOST FREEZE

Dietmar Maurer dietmar at proxmox.com
Thu Jun 4 11:21:19 CEST 2015


> and in combination of 4 products with big names and "Security Offering"
> the host freeze under garanty!
> Everybody can have this!
> 
> PVE-Firewall has block yesterday in this time of the attack complete ALL
> traffic again, so that nothing was going on the host! 

The pve firewall is just a packet filter, but Alexandre added support to
plug in complete IDS systems, like:

http://suricata-ids.org/
https://pve.proxmox.com/wiki/Proxmox_VE_Firewall

I guess that would help in such situations.



More information about the pve-devel mailing list