Proxmox 8 - NAT Configuration

Florian-s

New Member
Feb 1, 2024
1
0
1
Hello everyone,

I have a problem with my nat configuration. At the moment my server is constantly blocked by my hoster because they receive a message from an external organisation that my server is using an IP address that is not assigned to it. This address is my internal IP 10.10.10.1.

I have configured the firewall and actually set the NAT settings so that the internal IPs actually run via my main IP.

According to tcpdump, the ping from a VM also works correctly and uses the main IP.

However, there must still be an error somewhere, otherwise my hoster would not keep blocking the server because of it.

Here my /etc/network/interfaces configuration:
auto lo
iface lo inet loopback

auto eno1
iface eno1 inet manual

iface eno2 inet manual

auto vmbr0
iface vmbr0 inet static
address 194.xxx.xx.31
gateway 194.xxx.xxx.1
netmask 255.255.255.0
bridge-ports eno1
bridge-stp off
bridge-fd 0

auto vmbr1
#private sub network
iface vmbr1 inet static
address 10.10.10.1
netmask 255.255.255.0
bridge_ports none
bridge_stp off
bridge_fd 0

post-up echo 1 > /proc/sys/net/ipv4/ip_forward
post-up iptables -t nat -A POSTROUTING -s '10.10.10.0/24' -o vmbr0 -j MASQUERADE
post-down iptables -t nat -D POSTROUTING -s '10.10.10.0/24' -o vmbr0 -j MASQUERADE
post-up iptables -t raw -I PREROUTING -i fwbr+ -j CT --zone 1
post-down iptables -t raw -D PREROUTING -i fwbr+ -j CT --zone 1

I would be very happy if someone could help me!

Best regards
 

About

The Proxmox community has been around for many years and offers help and support for Proxmox VE, Proxmox Backup Server, and Proxmox Mail Gateway.
We think our community is one of the best thanks to people like you!

Get your subscription!

The Proxmox team works very hard to make sure you are running the best software and getting stable updates and security enhancements, as well as quick enterprise support. Tens of thousands of happy customers have a Proxmox subscription. Get yours easily in our online shop.

Buy now!