I still have MAC learning enabled. Then I took the following steps:
- Completely restarted PVE
- Logged in to LXC 202 via SSH
- I find 3 entries for the MAC of LXC 202:
$ bridge fdb show |grep -i BC:24:11:EE:DE:E3
bc:24:11:ee:de:e3 dev...
In the meantime, I have understood that these log messages are a consequence of the firewall policy REJECT and MAC learning. To better diagnose my failed connections, I set bridge-disable-mac-learning 1. I also looked at the contents of the...
...and even from one VM to another:
201 6 veth201i0-IN 07/Mar/2026:01:46:31 +0100 policy REJECT: IN=fwbr201i0 OUT=fwbr201i0 PHYSIN=fwln201i0 PHYSOUT=veth201i0 MAC=bc:24:11:ee:de:e3:00:0d:b9:4e:de:5c:08:00 SRC=192.168.20.65 DST=192.168.10.69...
Hello again,
I now see that it's not just IP packets routed through Wireguard that are affected. My reverse proxy is also affected. I run a reverse proxy on a Proxmox VM (ID=101) using Apache HTTPd. This can be accessed from the internet via...
In my Proxmox VE instance, IP packets are rejected by the firewall. According to the log, they are not assigned to the correct interface. This happens randomly. I would also like to mention that part of the connection runs through a WireGuard...