Hello,
I try to forward some ports from the Proxmox 1.5 Host Server vh1 (Linux 2.6.18-2-pve) to some VMs/Servers..this works as long as the VM is on the same host (vh1). If I try to forward to onther host vh2 (of course vh2 ist reachable from vh1, e.g. ping, open mysql, lynx on apache etc) i get no connection
any ideas?
Thanks
vh1:~# cat /proc/sys/net/ipv4/ip_forward
1
vh1:~# iptables -L
Chain INPUT (policy ACCEPT)
target prot opt source destination
Chain FORWARD (policy ACCEPT)
target prot opt source destination
Chain OUTPUT (policy ACCEPT)
target prot opt source destination
vh1:~# iptables -t nat -L
Chain PREROUTING (policy ACCEPT)
target prot opt source destination
DNAT tcp -- anywhere static.45.18.63.88.clients.your-server.de tcp dpt:1751 to:192.168.11.121:80 <-- works vm1, server is a VM on the same host
DNAT tcp -- anywhere static.45.18.63.88.clients.your-server.de tcp dpt:1752 to:192.168.11.5:80 <-- doesn't work vh2, server is an other host
Chain POSTROUTING (policy ACCEPT)
target prot opt source destination
MASQUERADE all -- anywhere anywhere
Chain OUTPUT (policy ACCEPT)
target prot opt source destination
vh1:~#
I try to forward some ports from the Proxmox 1.5 Host Server vh1 (Linux 2.6.18-2-pve) to some VMs/Servers..this works as long as the VM is on the same host (vh1). If I try to forward to onther host vh2 (of course vh2 ist reachable from vh1, e.g. ping, open mysql, lynx on apache etc) i get no connection
any ideas?
Thanks
vh1:~# cat /proc/sys/net/ipv4/ip_forward
1
vh1:~# iptables -L
Chain INPUT (policy ACCEPT)
target prot opt source destination
Chain FORWARD (policy ACCEPT)
target prot opt source destination
Chain OUTPUT (policy ACCEPT)
target prot opt source destination
vh1:~# iptables -t nat -L
Chain PREROUTING (policy ACCEPT)
target prot opt source destination
DNAT tcp -- anywhere static.45.18.63.88.clients.your-server.de tcp dpt:1751 to:192.168.11.121:80 <-- works vm1, server is a VM on the same host
DNAT tcp -- anywhere static.45.18.63.88.clients.your-server.de tcp dpt:1752 to:192.168.11.5:80 <-- doesn't work vh2, server is an other host
Chain POSTROUTING (policy ACCEPT)
target prot opt source destination
MASQUERADE all -- anywhere anywhere
Chain OUTPUT (policy ACCEPT)
target prot opt source destination
vh1:~#
Last edited: