[SOLVED] Firewall auto-add MASQUERADE rule

[Altinea]

Hello,
We just activate firewall on a Proxmox 4.4 installation.

We observed that proxmox automatically add a masquerade rule :
# iptables-save |grep MASQ
-A POSTROUTING -o vmbr0 -j MASQUERADE

So we need to delete this rule at every reboot or the VMs are seeing connections from the hypervisor instead of 'real' clients IPs (each VM has its own public address).

Is it normal ? Desired ? I don't really see why. Did I miss something in the firewall config ?

Best regards,
Julien

 

[wbumiller]

This does not come from PVE. Maybe you have a left-over 'post-up' rule in your /etc/network/interfaces file?

 

[Altinea]

Hello,
Found it ! Nothing in interfaces but I installed a P2P VPN named tinc that added this rule.

Sorry about that, I should have found this by myself.

Best regards,
Julien