[PVE-User] Internet facing Proxmox

[Eneko Lacunza]

You can also setup iptables so that only your fixed IPs are allowed to 
port 8006 (and ssh port...)

On 14/09/14 19:00, admin at extremeshok.com wrote:
> You don't need a VPN
>
> Follow the guides on my site this will give you a secure and optimized proxmox.
>
> Set proxmox admin interface to only listen locally (127.0.0.1) and connect via an ssh tunnel to port 8006.
>
> No offense, but this should be standard knowledge for an admin.
>
>
> Guides on https://extremeshok.com/blog
>
> Sent from my iPhone
>
>> On 14 Sep 2014, at 6:44 PM, Bart Lageweg | Bizway <bart at bizway.nl> wrote:
>>
>> Hi Gerald,
>>
>> Use Eth0 for internal network + VPN access.
>> Use Eth1 for internet access (no IP in interface, only create for bridge)
>>
>> Goodluck
>>
>> Bart
>>
>>
>> -----Oorspronkelijk bericht-----
>> Van: pve-user [mailto:pve-user-bounces at pve.proxmox.com] Namens Gerald Brandt
>> Verzonden: zondag 14 september 2014 18:41
>> Aan: pve-user at pve.proxmox.com
>> Onderwerp: [PVE-User] Internet facing Proxmox
>>
>> Hi,
>>
>> I've been asked to set up a Proxmox server on the Internet.  Has anybody done so, and how secure is the web interface on port 8006?
>>
>> I was considering running a VPN on Proxmox, and not allowing port 8006 access unless you were connected to the VPN.  That creates issues if the VPN server goes down.
>>
>> Also, with the new built in firewall, how easy is it to run all VPN's on a private address space and port forward as needed?
>>
>> Gerald
>>
>> _______________________________________________
>> pve-user mailing list
>> pve-user at pve.proxmox.com
>> http://pve.proxmox.com/cgi-bin/mailman/listinfo/pve-user
>> _______________________________________________
>> pve-user mailing list
>> pve-user at pve.proxmox.com
>> http://pve.proxmox.com/cgi-bin/mailman/listinfo/pve-user
> _______________________________________________
> pve-user mailing list
> pve-user at pve.proxmox.com
> http://pve.proxmox.com/cgi-bin/mailman/listinfo/pve-user
>


-- 
Zuzendari Teknikoa / Director Técnico
Binovo IT Human Project, S.L.
Telf. 943575997
       943493611
Astigarraga bidea 2, planta 6 dcha., ofi. 3-2; 20180 Oiartzun (Gipuzkoa)
www.binovo.es