aboutsummaryrefslogtreecommitdiff
path: root/blueprint/proxmox.md
diff options
context:
space:
mode:
authoralex <alex@pdp7.net>2025-10-18 20:46:49 +0200
committeralex <alex@pdp7.net>2025-10-18 20:47:09 +0200
commitf6afaa96b7adfadd8395104a822be06fda7ab041 (patch)
treeb75f5408a58d64d0b522a2ffa8aeb2a499ade7be /blueprint/proxmox.md
parentede3013d1722e4b6c212fc5461da870293933b87 (diff)
Add DHCP firewall details
Diffstat (limited to 'blueprint/proxmox.md')
-rw-r--r--blueprint/proxmox.md3
1 files changed, 2 insertions, 1 deletions
diff --git a/blueprint/proxmox.md b/blueprint/proxmox.md
index 7945786..08b3cc9 100644
--- a/blueprint/proxmox.md
+++ b/blueprint/proxmox.md
@@ -258,5 +258,6 @@ If you configure NAT, then notice that the Proxmox documentation about [Masquera
In my tests, these rules were required, otherwise Proxmox does not route VM and LXC traffic to the Internet.
Additionally, if your VMs and LXC hosts use DHCP/DNS from dnsmasq, then you need to allow traffic from their network to the Proxmox host.
+DHCP requires an additional rule with the DHCPfwd macro.
-For example, you can create an IP set `internal` for `10.10.10.0/24` and a rule that accepts all traffic from this IP set.
+For example, you can create an IP set `internal` for `10.10.10.0/24` and a rule that accepts all traffic from this IP set, and another rule with the DHCPfwd macro.