Hi folks,
I have some kind of showstopper here and I am unable to solve it myself.
I got PVE running at a dedicated server (Hoster). There I have got a main IP, where the PVEs Gui is accessible (1.1.1.1).
I got an additional IP 1.1.1.2 for my routing VM (ipfire). So I can say: If someone external requests 1.1.1.2:80 it is natted to my DMZ 10.0.0.1.
The additional IP is directly assigned to the WAN Port of ipfire (with extra MAC-Address).
All additional external IPs are running at vmbr0 bridged to the only nic in the system.
All IPs use the GW of the Host.
As I need an 2nd additional IP (1.1.1.3) I ordered one.
My problem with the 2nd additional IP is that it seems like all is routed through the main IP (1.1.1.1) which is my PVE Host.
If you look at the firewalllog of the host you can see that the request is logged.
SRC=176.66.68.203 (my home computers WAN) DST=1.1.1.3 LEN=60 TOS=0x00 PREC=0x00 TTL=54 ID=5613 DF PROTO=TCP SPT=39252 DPT=80
So how can I tell my PVE host to forward all requests to 1.1.1.3 to 1.1.1.2 (ipfire-Wan) that ipfire then can handle this request via firewall-rule?
Unfortunatly I cannot add a 2nd WAN IP to the WAN Interface of ip-fire.
Do you have any ideas about that?
Thanks a lot!
I have some kind of showstopper here and I am unable to solve it myself.
I got PVE running at a dedicated server (Hoster). There I have got a main IP, where the PVEs Gui is accessible (1.1.1.1).
I got an additional IP 1.1.1.2 for my routing VM (ipfire). So I can say: If someone external requests 1.1.1.2:80 it is natted to my DMZ 10.0.0.1.
The additional IP is directly assigned to the WAN Port of ipfire (with extra MAC-Address).
All additional external IPs are running at vmbr0 bridged to the only nic in the system.
All IPs use the GW of the Host.
As I need an 2nd additional IP (1.1.1.3) I ordered one.
My problem with the 2nd additional IP is that it seems like all is routed through the main IP (1.1.1.1) which is my PVE Host.
If you look at the firewalllog of the host you can see that the request is logged.
SRC=176.66.68.203 (my home computers WAN) DST=1.1.1.3 LEN=60 TOS=0x00 PREC=0x00 TTL=54 ID=5613 DF PROTO=TCP SPT=39252 DPT=80
So how can I tell my PVE host to forward all requests to 1.1.1.3 to 1.1.1.2 (ipfire-Wan) that ipfire then can handle this request via firewall-rule?
Unfortunatly I cannot add a 2nd WAN IP to the WAN Interface of ip-fire.
Do you have any ideas about that?
Thanks a lot!
Last edited: