Hi,
Long ago, I had set up PVE to pass the external IP address through to a KVM firewall by doing something like the following:
PVE's vmbr1 was on eth1 with a static address of 0.0.0.0.
vmbr1 was eth0 on the KVM running the firewall distro.
The firewall distro had its eth0 set to the external...