[SOLVED] I have a small problem

[DjBomberpilot]

I entered that and restarted everything but no connection

 

[Dunuin]

Is your Proxmox firewall enabled?

 

[DjBomberpilot]

firewall from the host is on and from the VM it is off

 

[DjBomberpilot]

maybe someone else has an idea?

 

[DjBomberpilot]

I still have the same problem, maybe someone else has an idea?

 

[oguz]

I still have the same problem, maybe someone else has an idea?

please post your current /etc/network/interfaces and the VM configuration qm config VMID

if you're on hetzner and you have a single IP only, then the masquerade [0] networking option should work fine

[0]: https://pve.proxmox.com/wiki/Networ...ith_tt_span_class_monospaced_iptables_span_tt

 

[DjBomberpilot]

Ich bin nicht bei hetzner sondern bei server4you

meine interfaces:

# network interface settings; autogenerated
# Please do NOT modify this file directly, unless you know what
# you're doing.
#
# If you want to manage parts of the network configuration manually,
# please utilize the 'source' or 'source-directory' directives to do
# so.
# PVE will preserve these directives, but will NOT read its network
# configuration from sourced files, so do not attempt to move any of
# the PVE managed interfaces into external files!

auto lo
iface lo inet loopback

auto eth0
#real IP address
iface eth0 inet static
address 85.93.89.20
netmask 255.255.255.0
gateway 85.93.89.1

auto vmbr1
#private sub network
iface vmbr1 inet static
address 10.10.10.1
netmask 255.255.255.0
bridge-ports none
bridge-stp off
bridge-fd 0

post-up echo 1 > /proc/sys/net/ipv4/ip_forward
post-up iptables -t nat -A POSTROUTING -s '10.10.10.0/24' -o eth0 -j MASQUERADE
post-down iptables -t nat -D POSTROUTING -s '10.10.10.0/24' -o eth0 -j MASQUERADE

# The primary network interface
iface eth0 inet static
address 85.93.89.20
netmask 255.255.255.0
broadcast 85.93.89.255
network 192.168.10.0
gateway 85.93.89.1

 

[DjBomberpilot]

bootdisk: ide0
cores: 4
ide0: day:101/vm-101-disk-0.qcow2,size=32G
ide2: none,media=cdrom
memory: 10000
name: test
net0: e1000=92:F5:03:0A:63:E8,bridge=vmbr1
numa: 0
ostype: win10
scsihw: virtio-scsi-pci
smbios1: uuid=437dbeb7-a31d-4505-a831-b2f409db6fe4
sockets: 1
vmgenid: 104df56d-07f4-428c-932e-c5ad67bdbe93

 

[oguz]

so for me, with network configuration similar to yours on the host, i can set up my VM networking as such:


the only difference is i'm using the range 192.168.1.0/24 instead of 10.10.10.0, but it should also work normally with the IP range you chose.

(enp35s0 is the name of my network interface on the host, you can check this also with ip link command)


after you've set up the VM networking like this, you should be able to reach internet normally.

here is my host's /etc/network/interfaces:

auto lo
iface lo inet loopback

auto enp35s0
iface enp35s0 inet static
        address my.public.ip.here/26
        gateway my.gateway.ip.here

auto vmbr0
iface vmbr0 inet static
        address 192.168.1.1/24
        bridge-ports none
        bridge-stp off
        bridge-fd 0

        post-up echo 1 > /proc/sys/net/ipv4/ip_forward
        post-up iptables -t nat -A POSTROUTING -s '192.168.1.0/24' -o enp35s0 -j MASQUERADE
        post-down iptables -t nat -D POSTROUTING -s '192.168.1.0/24' -o enp35s0 -j MASQUERADE
        # for containers
        post-up   iptables -t raw -I PREROUTING -i fwbr+ -j CT --zone 1
        post-down iptables -t raw -D PREROUTING -i fwbr+ -j CT --zone 1

you can try configuring yours also like this

 

[DjBomberpilot]

I set everything up that way


no Internet

 

[DjBomberpilot]

DNS Server not correct?

 

[Dunuin]

Did you edit the interface names and so on and rebooted the server?

 

[DjBomberpilot]

# network interface settings; autogenerated
# Please do NOT modify this file directly, unless you know what
# you're doing.
#
# If you want to manage parts of the network configuration manually,
# please utilize the 'source' or 'source-directory' directives to do
# so.
# PVE will preserve these directives, but will NOT read its network
# configuration from sourced files, so do not attempt to move any of
# the PVE managed interfaces into external files!

auto lo
iface lo inet loopback

auto eth0
#real IP address
iface eth0 inet static
address 85.93.89.20
netmask 255.255.255.0
gateway 85.93.89.1

auto vmbr0
iface vmbr0 inet static
address 192.168.1.1/24
bridge-ports none
bridge-stp off
bridge-fd 0

post-up echo 1 > /proc/sys/net/ipv4/ip_forward
post-up iptables -t nat -A POSTROUTING -s '192.168.1.0/24' -o enp35s0 -j MASQUERADE
post-down iptables -t nat -D POSTROUTING -s '192.168.1.0/24' -o enp35s0 -j MASQUERADE
# for containers
post-up iptables -t raw -I PREROUTING -i fwbr+ -j CT --zone 1
post-down iptables -t raw -D PREROUTING -i fwbr+ -j CT --zone 1

# The primary network interface
iface eth0 inet static
address 85.93.89.20
netmask 255.255.255.0
broadcast 85.93.89.255
network 192.168.10.0
gateway 85.93.89.1


i have reboot

 

[oguz]

post-up echo 1 > /proc/sys/net/ipv4/ip_forward
post-up iptables -t nat -A POSTROUTING -s '192.168.1.0/24' -o enp35s0 -j MASQUERADE
post-down iptables -t nat -D POSTROUTING -s '192.168.1.0/24' -o enp35s0 -j MASQUERADE
# for containers

change the enp35s0 here with your network interface name...

# The primary network interface
iface eth0 inet static
address 85.93.89.20
netmask 255.255.255.0
broadcast 85.93.89.255
network 192.168.10.0
gateway 85.93.89.1

and remove these duplicate entries (same as above)

 

[DjBomberpilot]

very cool it works thanks to your help thank you thank you thank you thank you you are the best

 

[Dunuin]

It looks like you are missing the basic network, security and linux knowledge. Maybe you should better use cloud services managed by some real admins that know how to do everything so the server is really safe and not might get a potencial security thread for all other servers out there. Setting up a server is a nice way to learn stuff but that should be done at home and offline and not with some hosted webservers.
I really would recommend you set that stuff up offline first and only go online if you really know what you are doing.

We always try to help with stuff if someone is willing to learn but that learning really should be done offline.

 

[oguz]

very cool it works thanks to your help thank you thank you thank you thank you you are the best

great! please mark the thread prefix as [SOLVED] by editing the thread (top right Edit Thread -> Title -> prefix)