[SOLVED] NAT and Port Forwarding

[YaseenKamala]

Hello All,

I am testing a dedicated server hosted with datapacket.com on PVE, could you please confirm if my configuration are correct? The reason I am asking your help is because with this configuration I have a Pfsense VM but not able to go outside/internet and can't access it's web interface too? (from outside)



Here are my interface:

auto enp2s0f0
iface enp2s0f0 inet static
        address 45.136.xxx.xxx
        netmask 255.255.255.224
        gateway 45.136.xxx.xxx

auto vmbr0
#private sub network
iface vmbr0 inet static
        address  10.10.10.1
        netmask  255.255.255.0
        bridge-ports none
        bridge-stp off
        bridge-fd 0

        post-up   echo 1 > /proc/sys/net/ipv4/ip_forward
        post-up   iptables -t nat -A POSTROUTING -s '10.10.10.0/24' -o enp2s0f0 -j MASQUERADE
        post-down iptables -t nat -D POSTROUTING -s '10.10.10.0/24' -o enp2s0f0 -j MASQUERADE

Iptables list:


Thanks for your help and have a nice day.

KAMALA

 

[mira]

Do you use the firewall for more than NAT?
If so, did you see the part about conntrack zones in the docs below the masquerade part? [0]


[0] https://pve.proxmox.com/pve-docs/pve-admin-guide.html#sysadmin_network_configuration (3.3.6)

 

[YaseenKamala]

Thanks @mira the problem is fixed.