Novice with network, how setup port 80?

[StealthFantom2]

Hi all,
sorry I´m novice with Proxmox. Created a VM with Debian 12, installed what I want, at Datacenter configured the Firewall. But can´t open the webserver port 80 and 443 in VM.

I find this on internet:

iptables -t nat -A PREROUTING -p tcp -d 175.*.censure.* --dport 80 -i vmbr0 -j DNAT --to-destination 192.168.10.100:80

This run on SSH Promox server? Whats next?
How FIX the IP for the VM1?

My config yet:

auto lo
iface lo inet loopback

iface eno1 inet manual

auto vmbr0
iface vmbr0 inet static
        address 192.168.0.150/24
        gateway 192.168.0.1
        bridge-ports eno1
        bridge-stp off
        bridge-fd 0

iface eno2 inet manual

iface eno3 inet manual

iface eno4 inet manual

 

[vesuvienne]

do you want configure the IP of your VM1?
Go to your VM1->edit->/etc/network/inetrfaces

auto lo
iface lo inet loopback

auto ens18 #interface of your VM
iface ens18 inet static
    address 192.168.0.151/24
    gateway 192.168.0.1

if you want a NAT, i think you need to add a new vmbr

 

[StealthFantom2]

do you want configure the IP of your VM1?
Go to your VM1->edit->/etc/network/inetrfaces

auto lo
iface lo inet loopback

auto ens18 #interface of your VM
iface ens18 inet static
    address 192.168.0.151/24
    gateway 192.168.0.1

if you want a NAT, i think you need to add a new vmbr

Like this? Or delete that DHCP?

I created a vmbr1, but when want to set for VPS1 then: error message is: bridge 'vmbr1' does not exist.

 

[vesuvienne]

i'm not sure i understand what you are trying to do,
if you have dhcp you don't need to configure your VM IP
are you doing NAT inside your VM?

if you need vmbr1 NAT bridge it should look like this: https://pve.proxmox.com/wiki/Network_Configuration
proxmox host /etc/network/interfaces

auto vmbr1
iface vmbr1 inet static
        address 192.168.10.254/24
        bridge-ports none
        bridge-stp off
        bridge-fd 0
      
post-up echo 1 > /proc/sys/net/ipv4/ip_forward
post-up iptables -t nat -A POSTROUTING -s 192.168.10.0/24 -o vmbr0 -j MASQUERADE
post-down iptables -t nat -D POSTROUTING -s '192.168.10.0/24' -o vmbr0 -j MASQUERADE
post-up iptables -t raw -I PREROUTING -i fwbr+ -j CT --zone 1
post-down iptables -t raw -D PREROUTING -i fwbr+ -j CT --zone 1
# after for a specific rule i don't know
iptables -t nat -A PREROUTING -p tcp -d 175.*.censure.* --dport 80 -i vmbr0 -j DNAT --to-destination 192.168.10.100:80

inside VM

auto lo
iface lo inet loopback

auto ens18
iface ens18 inet static
    address 192.168.10.100
    gateway 192.168.10.254 # bridge IP

 

[StealthFantom2]

I only need a setup a webserver with port 80 and 443 in VPS1. But not clear how that DHCP works or what routing there... :/ (I have only 1 dedicated IP adress from ISP)

After set these 2:

 

[vesuvienne]

your linux bridge isn't active
check the box autostart maybe



after the bridge is created, your bridge IP will be the gateway inside your VM

 

[StealthFantom2]

I have autostart:


Maybe can´t add a bridge ports when have only 1 internet cable?

 

[vesuvienne]

this should add a new vmbr, In Your proxmox Host
under: /etc/network/interfaces

auto vmbr1
iface vmbr1 inet static
        address 192.168.10.254/24 #address ip you want
        bridge-ports none
        bridge-stp off
        bridge-fd 0
    
post-up echo 1 > /proc/sys/net/ipv4/ip_forward
post-up iptables -t nat -A POSTROUTING -s '192.168.10.0/24' -o vmbr0 -j MASQUERADE
post-down iptables -t nat -D POSTROUTING -s '192.168.10.0/24' -o vmbr0 -j MASQUERADE
post-up iptables -t raw -I PREROUTING -i fwbr+ -j CT --zone 1
post-down iptables -t raw -D PREROUTING -i fwbr+ -j CT --zone 1

u can have more than 1 bridge with single cable or interface
what is your current config une /etc/network/interface

 

[StealthFantom2]

Okey, without restart can´t load, yet work the vmbr1. I set the config on host like this:


After POSTROUTING the IP is good?

 

[vesuvienne]

yeah look good
i forgot: ' '
on the first POSTROUTING

you can use systemctl restart networking to restart proxmox network

 

[StealthFantom2]

Still not working xD
vmbr0 in postrouting?

I slowly giving up... Watching few days, few hours of videos but not help any video. It´s crazy... Why not easier by clicking in Proxmox and voala!

 

[vesuvienne]

it should work flawless
yes vmbr0 in POSTROUTING
is vmbr1 activated now ?
do vmbr0 have internet ?
can you reach/ping your primary gateway inside proxmox host?

your config look like this now?

auto lo
iface lo inet loopback

iface eno1 inet manual

auto vmbr0
iface vmbr0 inet static
        address 192.168.0.150/24
        gateway 192.168.0.1
        bridge-ports eno1
        bridge-stp off
        bridge-fd 0
 
auto vmbr1
iface vmbr1 inet static
        address 192.168.10.254/24 #address ip you want
        bridge-ports none
        bridge-stp off
        bridge-fd 0
 
post-up echo 1 > /proc/sys/net/ipv4/ip_forward
post-up iptables -t nat -A POSTROUTING -s '192.168.10.0/24' -o vmbr0 -j MASQUERADE
post-down iptables -t nat -D POSTROUTING -s '192.168.10.0/24' -o vmbr0 -j MASQUERADE
post-up iptables -t raw -I PREROUTING -i fwbr+ -j CT --zone 1
post-down iptables -t raw -D PREROUTING -i fwbr+ -j CT --zone 1

#if everything work add rule my ssh rule ex: ssh Port forwarding to VM

    post-up iptables -t nat -A PREROUTING -i vmbr0 -p tcp --dport 32768 -j DNAT --to 192.168.2.2:22
    post-down iptables -t nat -D PREROUTING -i vmbr0 -p tcp --dport 32768 -j DNAT --to 192.168.2.2:22

 

[StealthFantom2]

Still nothing, and no internet in VM xD

Host settings yet:


VM settings yet:

 

[vesuvienne]

vmbr1 need 192.168.10.1/24 or 192.168.10.254/24
don't forget vmbr1 IP address will be the gateway in your VM

 

[StealthFantom2]

vmbr1 need 192.168.10.1/24 or 192.168.10.254/24
don't forget vmbr1 IP address will be the gateway in your VM

I have yet like this, but VM or CT can´t find internet (VM debian 12 installation error, no net configured) when at creation click on vmb1.

 

[vesuvienne]

did you add vmbr1 in your VM (VM->hardware->network device->vmbr1)

can you go to your console inside your VM and edit /etc/network/inerfaces ?

 

[StealthFantom2]

did you add vmbr1 in your VM (VM->hardware->network device->vmbr1)

can you go to your console inside your VM and edit /etc/network/inerfaces ?

Yes, I send you PM...

 

[StealthFantom2]

The vmb1 don't need gateway?

 

[vesuvienne]

no

 

[StealthFantom2]

With vmb0 have VM internet, with vmbr1 no.