port 25565 does not get accepted into my node

[awakenmagic]

Hello

I have been fighting with the firewall rules for a while now, to accept port 25565 tcp into my node "pve" (192.168.0.221) from the datacenter level

so I have this rule set up at the Datacenter level:


I have tried other rules too, but to no avail, I am not experienced in firewall rules on proxmox, so If I am doing a silly mistake that I might not be aware of, thats the reason

the router has the port 25565 forwarded to an IP 192.168.0.221 as TCP

where the interface "vmbr0" is the interface name of the "pve" node as seen below with the IP of 192.168.0.221


currently the only enabled firewall, is the firewall on the datacenter, and my node as well as the VM (which is a Minecraft Server) have the firewall disabled

I have tested a minecraft server on my main PC, with a port forwarded to my pc, and I can easily connected with public IP, but when I forward 25565 for the IP of the Proxmox server (192.168.0.221) on my router, and allow port as seen above, It does not let me connect with public IP, I am able though to connect with my local IP of the server, which is set up to 192.168.0.69

here are the network settings of the VM with the minecraft server:


I had the same problem a while back when I tried to make a nextcloud instance and allow port 443 and 80, exact same issue.


I would appreciate if you could help me explain what am I doing wrong, and possibly explain to me what am I doing wrong and how to do it the proper way

Thank you a lot in advance!!

EDIT1: forgot to tell, I am using a DELL r620 rack server as my proxmox machine.

 

[fschauer]

You are forwarding port 25565 of the PVE node (192.168.0.221) on your router. But you want to forward port 25565 of VM100 (192.168.0.69), which has a different IP address than the PVE node. So what you want to do is to configure the router to forward port 25565 to 192.168.0.69.

Also specifying the firewall rule at the datacenter level does not apply to the VM. Instead, configure the firewall rule at the VM level.

One more thing I noticed in the firewall rule in the first screenshot is that you specified both the source port and destination port as 25565. To let anyone connect from any source port to the destination port 25565, please clear the source port field and leave 25565 set as the destination port.

 

[awakenmagic]

You are forwarding port 25565 of the PVE node (192.168.0.221) on your router. But you want to forward port 25565 of VM100 (192.168.0.69), which has a different IP address than the PVE node. So what you want to do is to configure the router to forward port 25565 to 192.168.0.69.

Also specifying the firewall rule at the datacenter level does not apply to the VM. Instead, configure the firewall rule at the VM level.

One more thing I noticed in the firewall rule in the first screenshot is that you specified both the source port and destination port as 25565. To let anyone connect from any source port to the destination port 25565, please clear the source port field and leave 25565 set as the destination port.

I did figure that out eventually, I thought I have to forward ports into pve first, then pass them onto vm's using firewall, but know I understand. VMs are basically showed on network as separate from proxmox.

As for the ports, It was only for testing purposes, it is now only on destination.


It is all working perfectly as for now.