Please help, Port forwarding RDP

[m1k3ey]

Hi proxmox community!

Im really new to proxmox and im trying to setup port forwarding for a windows vm i have set up and i just dont understand what i am doing wrong

here is my /etc/network/interfaces

# network interface settings
auto lo
iface lo inet loopback


iface eth0 inet manual


iface eth1 inet manual


auto vmbr1
iface vmbr1 inet manual
        bridge_ports dummy0
        bridge_stp off
        bridge_fd 0
        post-up /etc/pve/kvm-networking.sh


auto vmbr0
iface vmbr0 inet static
        address  91.121.155.43
        netmask  255.255.255.0
        gateway  91.121.155.254
        broadcast  91.121.155.255
        bridge_ports eth0
        bridge_stp off
        bridge_fd 0
        network 91.121.155.0


auto vmbr2
iface vmbr2 inet static
address 192.168.0.254
netmask 255.255.255.0
bridge_ports none
bridge_stp off
bridge_fd 0


# Turn on Port Forwarding
        post-up echo 1 > /proc/sys/net/ipv4/ip_forward


#Forward Ports
post-up iptables -t nat -A POSTROUTING -s 192.168.0.0/24 -o vmbr0 -j SNAT --to-source 91.121.155.43
post-up iptables -t nat -A PREROUTING -i vmbr0 -p tcp --dport 3389 -j DNAT --to-destination 192.168.0.1:3389

for some reason it just wont open the port 3389

can anyone help me please?

 

[Nemesiz]

Try to check windows firewall.

p.s. as for iptables try to use:

post-up iptables -t nat -A PREROUTING -d 91.121.155.43/32 -i vmbr0 -p tcp -m tcp --sport 1024:65535 --dport 3389 --tcp-flags FIN,SYN,RST,ACK SYN -m state --state NEW -j DNAT --to-destination 91.121.155.43

 

[m1k3ey]

Thanks for the reply Nemesiz ill try that now and post back if it worked

 

[m1k3ey]

ahh didnt work am i doing it correctly?

iface eth1 inet manual




auto vmbr1
iface vmbr1 inet manual
        bridge_ports dummy0
        bridge_stp off
        bridge_fd 0
        post-up /etc/pve/kvm-networking.sh




auto vmbr0
iface vmbr0 inet static
        address  91.121.155.43
        netmask  255.255.255.0
        gateway  91.121.155.254
        broadcast  91.121.155.255
        bridge_ports eth0
        bridge_stp off
        bridge_fd 0
        network 91.121.155.0




auto vmbr2
iface vmbr2 inet static
address 192.168.0.254
netmask 255.255.255.0
bridge_ports none
bridge_stp off
bridge_fd 0




# Turn on Port Forwarding
        post-up echo 1 > /proc/sys/net/ipv4/ip_forward




#Forward Ports
post-up iptables -t nat -A POSTROUTING -s 192.168.0.0/24 -o vmbr0 -j SNAT --to-source 91.121.155.43
post-up iptables -t nat -A PREROUTING -d 91.121.155.43/32 -i vmbr0 -p tcp -m tcp --sport 1024:65535 --dport 3389 --tcp-flags FIN,SYN,RST,ACK SYN -m state --state NEW -j DNAT --to-destination 91.12$

 

[Nemesiz]

Sorry I gave you wrong iptable rule

post-up iptables -t nat -A PREROUTING -d 91.121.155.43/32 -i vmbr0 -p tcp -m tcp --sport 1024:65535 --dport 3389 --tcp-flags FIN,SYN,RST,ACK SYN -m state --state NEW -j DNAT --to-destination 192.168.0.1:3389

btw did you turned off windows firewall ?

 

[m1k3ey]

Thankyou so much nemesiz it worked!

Your my hero!