Can forward port to PVE but not VM's?

M

MrGeezer

Member
Apr 11, 2022
29
3
8
Good morning,

I enabled the firewall at the datacentre level and it locked me out of PVE. I added a rule at datacentre level that says

in ACCEPT proto:tcp source: my-home-ip D.Port: 8006

Now I can switch on firewall and still ccess PVE. So firewall is configured and working.

Now I have a VM connected to the public facing VMBR and I installed Debian then Plesk. When the firewall is OFF if I type the IP of my VM:8443 the plesk web console loads. As soon as the firewall is on, the connection times out.

I added the following rules:

DATACENTRE
in ACCEPT proto:tcp S.Port 8443 D.Port 8443

NODE
in ACCEPT proto:tcp S.Port 8443 D. Port 8443

VM
in ACCEPT proto:tcp S.Port 8443 D. Port 8443 Comment: Allow Plesk

However as soon as I switch on the firewall, connections to plesk VM timeout.

I'm sure I'm missing something obvious but beyond allowing the port at all 3 levels I don't see what else I can do? Can someone point me in the right direction please?

Thanks :)
 
hi,

the "source port" should be left alone, you only need to allow for the destination port
 
You must log in or register to reply here.
Top Bottom