Differences

This shows you the differences between two versions of the page.

--- proxmox_nginx [2016/07/17 11:32] – neoon
+++ proxmox_nginx [2019/12/08 15:37] – neoon
@@ Line 32: / Line 32: @@
   POLICY="allow"
-Restart pveproxy: service pveproxy
+You can also block it over iptables, since it does not fully work anymore on 5.x.
+  post-up iptables -A INPUT -p tcp --dport 8006 -s 127.0.0.0/8 -j ACCEPT #allow localhost for reverse proxy
+  post-up iptables -A INPUT -p tcp --dport 8006 -j DROP #webinterface
+  post-up iptables -A INPUT -p tcp --dport 3128 -j DROP #spiceproxy
+Restart pveproxy:
+  service pveproxy restart
 https://YOURIP:8006 should be not more reachable.