Update; executing iptables -t raw -I PREROUTING -i fwbr+ -j CT --zone 1 on the host machine (root @ PVE host) "fixes" the issue.
Source: https://forum.proxmox.com/threads/firewall-stops-vm-ct-communication-also-have-to-reboot-to-fix.59811/#post-275871
I do not fully understand the issue and I...
You lost me the very second I read video+sound. Anyhow, this is very offtopic to proxmox... I won't be replying to this thread from now on, sorry.
Regards.
hey you're having the same issue I have. Feel free to follow this thread that I started so in case I find a solution (meaning that the setup fully works, with firewall setup, multiple natted subnets, etc...) I will post a followup reply there ^-^
(edit1) - added link to the mentioned thread...
Two related threads:
https://forum.proxmox.com/threads/firewall-stops-vm-ct-communication-also-have-to-reboot-to-fix.59811/
https://forum.proxmox.com/threads/letting-the-vm-access-internet-through-the-masquerading-configuration-ovh.59809/
You can do that for HTTP / HTTPS traffic (and maybe some other protocols too), but you can not do that for SSH for example.
You can have your VMs "natted" in a subnet on your host, proxy all incoming traffic on ports 80 (http) and 443 (https) to that VM which will then handle the HTTP(s) traffic...
Install fail2ban (proxmox wiki)
You have everything listed on the wiki page
You can just copy and paste without even the need of knowing what you are doing (though if this is the case, don't host public servers yet and learn on local networks or with small deployments - my 2 cents on this)
It...
Wait what? I mean... welcome by all means, but what do you mean by "attaching a nice face to user forum nickname"?
Why would "this", assuming you are referring to this forum post, be a bad idea?
Anyhow, welcome ^-^
HEY! This looks like a solution for my issue too! (If you have a minute or two, please take a fast look at it - thread link) Can you provide some simple explanation what all the parameters stand for?
Thank you in advance,
~ Aljaz S.
Remmina is some quite good piece of software. It's basically a client for remote connectivity. It supports SSH, RDP, VNC, SPICE... protocols (and more)
No firewall is enabled on VM level
All the VMs can reach each other
Conclusion;
All VMs can reach each other and the host
Host can reach all VMs and outside network (my local home network - 192.168.1.0/24)
This issue is only active when the firewall is enabled
Firewall doesn't have any...
I already replied to another thread, but I think that starting a new one is a bit more appropriate because the details are probably quite different.
I also suspect that this issue is very closely related to this one.
All the data I can provide - request more if needed
root@apollo:~#...
or if your both (desktop and VM) run any sort of Linux distro, you can just rsync the files over the network.
Ofc, this is a fast-easy and usable solution only if this is one time job, and not something like office / school work where you have to transfer files from/to the USB all the time.