Internet > Firewall, IP Whitelist, IPS/IDS yada yada> DMZ / VLAN > > Proxmox /w FW:$true (rule only for game ports) > GameServer > Deny all traffic from GameServer to go anywhere but internet

Proxmox server has firewall, all the hosts on proxmox have firewall enabled (in proxmox). Only allow my main device to access. No VLAN crosstalk permitted.

I don’t bother with anything else internally, if they’re inside they deserve to SSH with my default root / password credentials

If only the Minecraft server ports are forwarded it shouldnt be that big of a problem.

I run Ubuntu server on my proxmix because I’m too stupid to work with containers