[SOLVED] Internet access suddenly stopped

[cloudfather]

The internet access was working perfectly on the bridge network but suddendly today stopped working.
Firewall: off
/etc/network/interfaces

auto lo
iface lo inet loopback

auto enp4s0
iface enp4s0 inet static
    address xxx/26 # realIP
    gateway xxx.1
    up ip route add  xxx/26 dev enp4s0 scope host

auto vmbr1
iface vmbr1 inet static
    address 10.10.10.1/24
    bridge-ports none
    bridge-stp off
    bridge-fd 0
    bridge-vlan-aware yes
    bridge-vids 2-4094
    bridge-maxwait 0
    post-up   echo 1 > /proc/sys/net/ipv4/ip_forward
    post-up   iptables -t nat -A POSTROUTING -s '10.10.10.0/24' -o enp4s0 -j MASQUERADE
    post-down iptables -t nat -D POSTROUTING -s '10.10.10.0/24' -o enp4s0 -j MASQUERADE

auto vmbr2
iface vmbr2 inet static
    address 192.168.1.1/24
    bridge-ports none
    bridge-stp off
    bridge-fd 0
    bridge-vlan-aware yes
    bridge-vids 2-4094

auto vmbr4
iface vmbr4 inet static
    address 192.168.100.1/24
    bridge-ports none
    bridge-stp off
    bridge-fd 0
    bridge-vlan-aware yes

 

[oguz]

hi,

The internet access was working perfectly on the bridge network but suddendly today stopped working.

can you describe the symptoms and your setup a bit more?

 

[cloudfather]

Thanks @oguz for the quick response.

This seems working now, do I need to allow any specific firewall connection to grant this access If I am using hetzner server?

 

[oguz]

do I need to allow any specific firewall connection to grant this access

what do you mean? which access?

This seems working now

how did it start working? what was the issue?

 

[cloudfather]

seems to be dropped when I enable the external firewall and allow icmp, ssh and 8006 access only
do I need more roles to add?

 

[oguz]

when I enable the external firewall and allow icmp, ssh and 8006 access only

have you added these rules correctly? can you show?

do I need more roles to add?

this should be enough to access the server (if the rules are set correctly)

 

[cloudfather]

Here we are @oguz

 

[oguz]

Here we are @oguz
View attachment 22538

where's this firewall? maybe you need to also set up port forwarding to your PVE host if it's behind the firewall?

 

[cloudfather]

this issue was solved by updating the Hetzner firewall
and here is the last update

 

[cloudfather]

This is the best