A
amilkar
Guest
Hi everybody, I new with Promox. I've made many interesting thing, but i have a real and big problem.
This is the scenario.
This is my /etc/network/interface
auto lo
iface lo inet loopback
auto eth1
iface eth1 inet static
address 172.19.2.1
netmask 255.255.0.0
gateway 172.19.1.1
auto vmbr0
iface vmbr0 inet static
address 192.168.10.1
netmask 255.255.255.0
bridge_ports eth0
bridge_stp off
bridge_fd 0
I have a VM ws 2008 with static ip=192.168.10.2. From subnet 192.168.10.0/24 everything its ok. I reach port 80,25, everything.
To access outside the subnet I have a nat fiilter to access from 192.168.10.0 to 172.19.0.0, and I can reach everything.
iptables -t nat -A POSTROUTING -s 192.168.10.0/24 -o eth1 -j SNAT --to 172.19.2.1
But inwardly it is not possible, I can't reach prt 25 from outside subnet. From any pc in 172.19.0.0 is imposible reach acces to prt 25 in 192.168.10.2.
I have this,
iptables -t nat -A PREROUTING -i eth1 -p tcp --dport 25 -j DNAT --to 192.168.10.2:25
I also try with
iptables -t nat -A PREROUTING -i eth1 -p tcp --dport 25 -j DNAT --to 192.168.10.1:25
but it not working..
Please, I'm a serious issue.
I sincerely appreciate any help.
This is the scenario.
This is my /etc/network/interface
auto lo
iface lo inet loopback
auto eth1
iface eth1 inet static
address 172.19.2.1
netmask 255.255.0.0
gateway 172.19.1.1
auto vmbr0
iface vmbr0 inet static
address 192.168.10.1
netmask 255.255.255.0
bridge_ports eth0
bridge_stp off
bridge_fd 0
I have a VM ws 2008 with static ip=192.168.10.2. From subnet 192.168.10.0/24 everything its ok. I reach port 80,25, everything.
To access outside the subnet I have a nat fiilter to access from 192.168.10.0 to 172.19.0.0, and I can reach everything.
iptables -t nat -A POSTROUTING -s 192.168.10.0/24 -o eth1 -j SNAT --to 172.19.2.1
But inwardly it is not possible, I can't reach prt 25 from outside subnet. From any pc in 172.19.0.0 is imposible reach acces to prt 25 in 192.168.10.2.
I have this,
iptables -t nat -A PREROUTING -i eth1 -p tcp --dport 25 -j DNAT --to 192.168.10.2:25
I also try with
iptables -t nat -A PREROUTING -i eth1 -p tcp --dport 25 -j DNAT --to 192.168.10.1:25
but it not working..
Please, I'm a serious issue.
I sincerely appreciate any help.