From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from firstgate.proxmox.com (firstgate.proxmox.com [212.224.123.68]) by lore.proxmox.com (Postfix) with ESMTPS id 8A8B61FF161 for ; Tue, 24 Sep 2024 21:06:11 +0200 (CEST) Received: from firstgate.proxmox.com (localhost [127.0.0.1]) by firstgate.proxmox.com (Proxmox) with ESMTP id 5DBA112BB2; Tue, 24 Sep 2024 21:06:20 +0200 (CEST) ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=dnga/7SG34ZczTQKBrxwxbiPT1L+MZVqpVhVlD5SFeuWVA5h3zEVP81PkZQ9y/Xnslh6pH57buRUxyKdGOdyQutXCpwJ9iuxGc6aJJQCWPcpWymZk2Uq/DxVAkByha8zyNNQW5r0Kwe9Cl4LcYEMQNIaJUqhw8ufLTI9WH6yC2OwlKcAkqQNFJkhnCvaNOQyuzZmcR4PVP7pIzEylHN+MD7hr68/pPhCdOydk9HHjiOnIA/vUq7d9HqXEYMOgaI34FH+1rcMnfPdrNyP3rLHTLSJWGxxSlFvF4UsfwzyWUuSQ4n8o3Al+FTQYdhIZNuUvsyaBi07t8IxjjV8KR0WTQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=AbcXVX62yt4fMqzX3KG8gU67KZhzijlaFHbqiWGpTWM=; b=WSvtEsazfUO9xTJuZgiX6e0KA5TbJAwbC3eog0lZSrzzmgyqdZOoRN5NBBm8LmzAF4gl01gXMpuoK1nf4UkwSfWlPNtlPgK4UKSvBGa0nj+/Tzwnt/L+UVEbTsMQKTE3LDDoG2udunFXaesc9/X4v/oQmWyYCdtpG+jKQdK24E0eHlre0zbb/fIBPmHSRC973PrN2DodUI6jMO3BZTe1qFm25QC6VQJhN+vD8IRavxt8CIrOenxXnOlUgsVnQ+ebDz+8FLOQtiq5j0zHKOXgwBQyDFXD/l/v4xVnOzZL+2743ehkOqLSZJghRq5FTCL/YFjW6wbbU5pPjJ6J5xsLiQ== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass (sender ip is 62.210.214.198) smtp.rcpttodomain=lists.proxmox.com smtp.mailfrom=shymega.org.uk; dmarc=pass (p=none sp=none pct=100) action=none header.from=shymega.org.uk; dkim=none (message not signed); arc=none (0) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=shymega.org.uk; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=AbcXVX62yt4fMqzX3KG8gU67KZhzijlaFHbqiWGpTWM=; b=PtkvWa9y7ICF3tJkjiDPewLp/jEbL3mGe2CHZRr3YWXWrTcJzUExX8X+3/31QsoD881SOgNs22RuoX8h/z0DQ+hFVSa7GmOrtYJXnxxrVlPl6NMOGFnZ93VIzPX9lfnOebmdXOIPEIZk6UnM+5UP0OGZexcw1OovvsI3TRU8GPlmfdhO/3GntqAq8yhxKLgOENUFoqlMCm3zAU+sEsUYLnEfk0zugZlqLICzJFZDHF+BJTx03uMqO6zE3vyLVPZDgokmVZpvMQFzPzGOFT7lhj69TFhSJaH/Pi1X5z91GWcHDvaYsXHehdQqyMPoZMcEAA0DLh2UpVOfljUsJqOOLQ== X-MS-Exchange-Authentication-Results: spf=pass (sender IP is 62.210.214.198) smtp.mailfrom=shymega.org.uk; dkim=none (message not signed) header.d=none;dmarc=pass action=none header.from=shymega.org.uk; Received-SPF: Pass (protection.outlook.com: domain of shymega.org.uk designates 62.210.214.198 as permitted sender) receiver=protection.outlook.com; client-ip=62.210.214.198; helo=oracle.rodriguez.org.uk; pr=C Date: Tue, 24 Sep 2024 20:29:27 +0200 From: "Dom (shymega) Rodriguez" To: pve-user MAILING LIST Message-ID: MIME-Version: 1.0 X-EOPAttributedMessage: 0 X-MS-PublicTrafficType: Email X-MS-TrafficTypeDiagnostic: LO1PEPF000022FD:EE_|CWXP265MB2199:EE_ X-MS-Office365-Filtering-Correlation-Id: f533964c-23ee-469c-0ede-08dcdcc72e96 X-MS-Exchange-SenderADCheck: 1 X-MS-Exchange-AntiSpam-Relay: 0 X-Microsoft-Antispam: BCL:0; ARA:13230040|1800799024|376014|36860700013|82310400026|27256017; X-Microsoft-Antispam-Message-Info: =?utf-8?B?VXE3SytRZGVkTzRFaXdrTFdyQUJhaEdZVVdVTnhtU2F0c3RKTlpJSTduNWZH?= =?utf-8?B?cHVZTjYrQjByS3o1enJuU0prVU5TaTdtRUwwQy85ay9FeW5tUmhTb0NyQnVI?= =?utf-8?B?KzZ0WFZQTWtSMThsbWxDVFhqdGtzVnIxazBpbVNHVDV4Q3pXcW9RcDlqek43?= =?utf-8?B?WEdVYzVwd0U3b1NsNHMvMGxOckc3VnA3dG81bTViRmFRYVpWYURMV21zalhX?= =?utf-8?B?NVZEZ0s5M0pjZTRqbzlzV2I0bDZhUitqZDlMUDRaWTZMVEpmZSswdWxkOGlG?= =?utf-8?B?QUMydWRaMEdSWVlMWElaUG56SW5ZUzJ1UW1OalVvbE9PYzhJdlJnKzRTYzdo?= =?utf-8?B?eVNJN01tUTRpR2dyY1BlblRwN3o3d3laNWdGSXdXUWJQZnZiZWYrQWZkbTh4?= =?utf-8?B?Ylc3U21tOWtSUS85Q1VFVUJHM05OMWIxZkcvYlc4ODVnaG13TFNVaUdKdVRl?= =?utf-8?B?eUZHeUNkOHQwZXNyZXA0Y1gzdGZPMUdVczk2WlNzSEtUbVVHRnlRcWswNGdx?= =?utf-8?B?UEhrVHM5WURnSHl2TlNoNExGaWluRmxkOG94aTR2alhhRS9TM05XdnFuZThZ?= =?utf-8?B?YmFuSE5GazhDVjVOUlJPeU5uNjVwb0xSdWNHb3lyMkZVT2kzS2ljam5uN2Ru?= =?utf-8?B?NlY0SnhUQVN0Rk1XQ0VZSGNTYmdhUkVtZFhXZ2F2bjR4Sjl1TGNTc1NLbWlr?= =?utf-8?B?Y0taQW5NbXp5MFVOdjNrQ09uWUEwZk5GaFhDbnU2MWRnektMcVZ6aHVOTDUy?= =?utf-8?B?cjFyeW9VQXlkUUpUcnpWZjA5aHduZVJSNWZPeFhvRFp2dDlpRTVydzY2cVpp?= =?utf-8?B?ZXNWTUJ4eHhmTjRaOHBMTC9NR1VmMnQ5cTVTQWd5SjBTcEZVekk2ZTFmTUQ3?= =?utf-8?B?RlpodENOTGVIUmtBR0IrSDZmOFJEaE5kTEkwWlNtT254TlpTWVUwYitWZnhy?= =?utf-8?B?aXBzdG5nd0VBL2xyUHovTjkyVUkwZUhHQmU1YWdNaHo2S0N0RXNsRHNTS2Iz?= =?utf-8?B?cXM1LzBIdXFqN3R0d25OVjYxdW9uU3ZmVTh3a0tEUVU5WmJ2MUJscG14aSts?= =?utf-8?B?OTcxWGsxNlhnemVlSmpZdFVndWNmWkJ2RmdpU3ZsRVFSa1F2NVJvck9OU2Rm?= =?utf-8?B?RmZ1TnZOOTNML0RTVllDQ0N3RjNDK1gvRlNlOVNSaFRhT3p4TS9GVUJqNlVF?= =?utf-8?B?K2J1UlhKTHAyQVJZUHJqbHd0UGUzbkg4NzB4Tit5aHFERnF0eHltMzdBUHJl?= =?utf-8?B?U2xnUlllRHNhblh1eGQ2VUZzU1ZUUzhyTFc4SCtaWkpZcklJdkNFYWY4YTlk?= =?utf-8?B?ZzIxQ3ZncVNBU0VMSWloZHN5S0hkRGFUZmhOWXVGd0hUTERaVE95MG00NW1z?= =?utf-8?B?Zmt1QWlWa0Jmb3VWYkh2MzlLZUlhU3E3eFkwd3RhQXdZdjVvaE0zK2x1VVpR?= =?utf-8?B?cWw4NThtZlpTVkZ2d1kxTE1vOGRsSzBpa0J5eVl5MGlaVFFZV3Q2Q2VLMFlw?= =?utf-8?B?WmdEWXZlM0hYZU9CMkJaTjJIdFhFRHJaNWduaUhOWFZ3Q2EwTHErWlVxV0Z2?= =?utf-8?B?TlA0QUIvbUh2T0xXNnlINzc4elJKeFAxSXJ5bTF3VXYrcmZWMHhmWVBTSXpT?= =?utf-8?B?NHNDTTlvNjNsU3FBRjl0dzNmZ090R2hoSk9GazJrMSsyWkxyNkwxenZwMXY1?= =?utf-8?B?U0hVTkNqOTNsVFRRWlY0WWJvRzRDcEJOZ2h5RmRoREYxa1d2VDR2TzR6akdX?= =?utf-8?B?M3hqMitlTHc4NDJXc1lpbkk1cGd1RklTWGI5QlJCZkFDdlVzWDhKajFFT2dr?= =?utf-8?Q?TIEX3kwmET0les/ruOCMiKVUV/ynAOzglcvsc=3D?= X-Forefront-Antispam-Report: CIP:62.210.214.198; CTRY:FR; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:oracle.rodriguez.org.uk; PTR:oracle.rodriguez.org.uk; CAT:NONE; SFS:(13230040)(1800799024)(376014)(36860700013)(82310400026)(27256017); DIR:OUT; SFP:1102; X-OriginatorOrg: shymega.org.uk X-MS-Exchange-CrossTenant-OriginalArrivalTime: 24 Sep 2024 18:32:01.7331 (UTC) X-MS-Exchange-CrossTenant-Network-Message-Id: f533964c-23ee-469c-0ede-08dcdcc72e96 X-MS-Exchange-CrossTenant-Id: 7e15dc52-0465-4028-b82a-3c894bbc5ba6 X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=7e15dc52-0465-4028-b82a-3c894bbc5ba6; Ip=[62.210.214.198]; Helo=[oracle.rodriguez.org.uk] X-MS-Exchange-CrossTenant-AuthSource: LO1PEPF000022FD.GBRP265.PROD.OUTLOOK.COM X-MS-Exchange-CrossTenant-AuthAs: Anonymous X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem X-MS-Exchange-Transport-CrossTenantHeadersStamped: CWXP265MB2199 X-SPAM-LEVEL: Spam detection results: 0 ARC_SIGNED 0.001 Message has a ARC signature ARC_VALID 0.001 Message has a valid ARC signature AWL 1.100 Adjusted score from AWL reputation of From: address BAYES_00 -1.9 Bayes spam probability is 0 to 1% DKIM_SIGNED 0.1 Message has a DKIM or DK signature, not necessarily valid DKIM_VALID -0.1 Message has at least one valid DKIM or DK signature DKIM_VALID_AU -0.1 Message has a valid DKIM or DK signature from author's domain DKIM_VALID_EF -0.1 Message has a valid DKIM or DK signature from envelope-from domain DMARC_PASS -0.1 DMARC pass policy SPF_HELO_PASS -0.001 SPF: HELO matches SPF record SPF_PASS -0.001 SPF: sender matches SPF record URIBL_BLOCKED 0.001 ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [shymega.org.uk, aa.net.uk] Subject: [PVE-User] Advice on setting up a L2TP VPN on Proxmox. X-BeenThere: pve-user@lists.proxmox.com X-Mailman-Version: 2.1.29 Precedence: list List-Id: Proxmox VE user list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-To: Proxmox VE user list Content-Type: multipart/mixed; boundary="===============4848316474446230465==" Errors-To: pve-user-bounces@lists.proxmox.com Sender: "pve-user" --===============4848316474446230465== Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="op7neesu2tchzcg6" Content-Disposition: inline --op7neesu2tchzcg6 Content-Type: text/plain; charset=utf-8; format=flowed Content-Disposition: inline Content-Transfer-Encoding: quoted-printable Hello, I've got a Proxmox server, and I'm wanting to use an A&A L2TP VPN[0] on the Proxmox host. I'm unsure how to set this up in `/etc/network/interfaces`, as I primarily use NetworkManager on NixOS. I was thinking of running pfSense/opnSense in a VM, and then connecting my VMs and LXC containers behind it. The reason I'm using a L2TP VPN is because the hosting company don't offer IPv6 without a block of IPv4 IPs, and I think that's overkill. All I need is one IPv6 block and one IPv4 address. My desired setup would be: WAN <=3D=3D> L2TP VPN <=3D=3D> Proxmox host <=3D=3D> Firewall VM=20 | | VMs <=3D> <=3D> LXC =20 [0]: https://www.aa.net.uk/broadband/l2tp-service/ Is this possible? Best wishes, -- Dom Rodriguez GPG Fingerprint: EB0D 45E6 D0DC 1BA1 A2B5 FC24 72DC F123 1E54 BD43 --op7neesu2tchzcg6 Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEE6w1F5tDcG6GitfwkctzxIx5UvUMFAmbzBQcACgkQctzxIx5U vUPYBBAAnpvKhXBP62ZEHDNb/YvoGWCF6cVDYoYLIe156MK+/7boDgikd0evruYY D2zFMT2qrRO7SSHk45k/pVaowDa3xVhbb9FPUGIbUpVNEYM7oPzJvR/W2VBXm/Ca 1FgKpXiQqa0HbfXVRp5lDJ9tEaH7QofKxHhoNGV+IXPmOFQ/qneDT1TjiUraBKrs bLfOUTyfhrlRa+urjbFAQHf/ChPKssCM7Vv0l9K0zjASp1e+UgYUMY3LRKJv+DyT d8fpV0KJSb9kQOa0FyGmaV4SS/kB3ePVPkLxF6B0TzRKzfpLuUitQBaRwYPcVO0s XiF17Uza90o6UssJ4hsBgjlnFWshzVkEVhnhQSrTmnufPQ6VXbcV013bBn70YJNx JYm0w7vVQRbvKBkKJQYL865PCS2E7zrPB6HIfWoDNuAKDjVVVbmTnmNhW3nq1OxJ 3mL4d+Dqdk2ByRJ0CoyRKJzzAM2YSIL0Ov7rJkMEcQX1Ovhn4RutVA/6QvAWhjiV t5pKYSfKSbzfINSeywqBAgZmOPO4BsGDOXx+x6FsVyeExiRe8j2Awyc/xYXxK551 bIE+JDOpdx5gp6q7s+S8p3fYpeJ3SZYdgQoQtsKc6DxLIWJhipi1Bke8ersJmVi0 7XIyNkGCjR04tZghKHzDH2GuGZEzFunJJ/1vDLghS64Zcq41/JY= =cRjC -----END PGP SIGNATURE----- --op7neesu2tchzcg6-- --===============4848316474446230465== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ pve-user mailing list pve-user@lists.proxmox.com https://lists.proxmox.com/cgi-bin/mailman/listinfo/pve-user --===============4848316474446230465==--