Access VMs from the Internet not possible (Proxmox host works though)

[Arika]

This is probably a stupid question and there's probably also just one checkbox I'm missing, but: I'd like to access my VMs from the internet, like this:

DyDNS:extPort > Router > InternalIP:intPort

• I have a DynDNS configured for years and I can access my jails in my TruNAS using port forwarding, no issues here
• I can also access the Proxmox GUI on 8006 the same way
• I can access my VMs from the local network
• But I cannot access any ports on the VMs externally

Configuration
1. Firewall is turned off in the Proxmox UI (Datacenter, Cluster, VM)
2. Firewall is turned off as well in the VM (iptables -L returns ACCEPT on all policies)
3. Network cards on VMs are bridged with vmbr0, that one is using enp1s0

I'm out of ideas. Help (or RTFM with a Link) would be appreciated.

 

[Moayad]

Hi,

Could you please post the network configuration of your PVE server `cat /etc/network/interfaces`?

 

[Arika]

Sure.

auto lo
iface lo inet loopback

iface enp1s0 inet manual

auto vmbr0
iface vmbr0 inet static
        address 192.168.0.23/24
        gateway 192.168.0.1
        bridge-ports enp1s0
        bridge-stp off
        bridge-fd 0
        bridge-vlan-aware yes
        bridge-vids 2-4094

I'm still troubleshooting a bit. I have a 2nd router in my network, which is taking care of DHCP. So, I tested the following with Portforwarding enabled on both routers (basically chaining):

ExternalRouter:ExtPort > InternalRouter:ExtPort > VM:Port

This seems to work. Still can't really get my head around it.

 

[Moayad]

Hi,

The VM has an IP address of 192.168.0.x/24 subnet, right? I would check the port forwarding rules on both routers

 

[Arika]

Yes, it has. Rules seem fine on both sides. But as soon as I do:

ExternalRouter:ExtPort > VM:Port

it doesn't work anymore. It's a FritzBox. I'll dig further. Thanks for jumping in.