problem to connect a pptp server out the vmbr0

Discussion in 'Proxmox VE: Networking and Firewall' started by absimiliard, Aug 29, 2018.

  1. absimiliard

    absimiliard New Member

    Joined:
    Aug 21, 2014
    Messages:
    3
    Likes Received:
    0
    I have , 1 pptp server with 3 nic on 3 vmbr, on these vmbr have differents VM win10

    I have a proxmox server with this lans

    external iP (on eth0) --> vmbr0 (10.0.1.1) --> VM pptp server (10.0.1.2), and VM win10(10.0.1.3)
    --> vmbr1 (10.0.2.1) --> VM pptp server (10.0.2.2), and other win10
    --> vmbr2 (10.0.3.1) --> VM pptp server (10.0.3.1), and other win10

    I have a this iptables set:
    iptables-save
    # Generated by iptables-save v1.6.0 on Wed Aug 29 05:45:18 2018
    *filter
    :INPUT ACCEPT [2506:1042958]
    :FORWARD ACCEPT [58909:19319520]
    :OUTPUT ACCEPT [2063:518226]
    COMMIT
    # Completed on Wed Aug 29 05:45:18 2018
    # Generated by iptables-save v1.6.0 on Wed Aug 29 05:45:18 2018
    *nat
    :pREROUTING ACCEPT [1240:116263]
    :INPUT ACCEPT [901:92399]
    :OUTPUT ACCEPT [242:170632]
    :pOSTROUTING ACCEPT [2504:291281]
    -A PREROUTING -i enp1s0 -p tcp -m tcp --dport 3389 -j DNAT --to-destination 10.0.1.3:3389
    -A PREROUTING -i enp1s0 -p tcp -m tcp --dport 3390 -j DNAT --to-destination 10.0.2.3:3389
    -A PREROUTING -i enp1s0 -p tcp -m tcp --dport 3391 -j DNAT --to-destination 10.0.3.3:3389
    -A POSTROUTING -s 10.0.1.0/24 -o enp1s0 -j MASQUERADE

    But i can't make telnet out to pptp server to 1723 port but I can do from the same server, or win10 VM

    Do You can help me?

    Kind Regards.
     
  2. Richard

    Richard Proxmox Staff Member
    Staff Member

    Joined:
    Mar 6, 2015
    Messages:
    408
    Likes Received:
    10
    Is the item still open? If yes post please more information

    pptp connects from .. to ... ?
    Where is "eth0"?
    Specify exactly source and destination (IP, port, where they are located) about working respectively not working connections.

    If you post a pvereport some of the questions above would be answered implicitly.
     
  3. absimiliard

    absimiliard New Member

    Joined:
    Aug 21, 2014
    Messages:
    3
    Likes Received:
    0
    Hi, yes it still open.

    The pptp connect from internet to subnet on vmbrX.

    I don't understand your question, the eth0 is the interface with external IP connect to internet but its no under any vmbrX.

    The expect network its:

    from any IP from internet we expect connect to the ip:port - 91.121.210.82:1723, and then the nat translator connect to 10.0.1.2:1723. When connection is established the pptp server give a IP on the networks 10.0.x.x/24.

    How can i do a pvereport?

    Kind Regards.
     
  4. Richard

    Richard Proxmox Staff Member
    Staff Member

    Joined:
    Mar 6, 2015
    Messages:
    408
    Likes Received:
    10
    Run simply

    Code:
    pvereport
    
    at the Proxmox host's command line.
     
  5. absimiliard

    absimiliard New Member

    Joined:
    Aug 21, 2014
    Messages:
    3
    Likes Received:
    0
    Hi,

    First thank you for your attention and help.

    I do the command and the report iI load here.

    Kind Regards.
     

    Attached Files:

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice