Proxmox Firewall for NAT

[Prismoran]

Thanks for the Post of this Rule (iptables -t raw -A PREROUTING -i fwbr100i0 -j CT --zone 1) - i searched around for many hours but this was not mentioned anywhere!
Please Proxmox-Team consider to spend a short text about this on the https://pve.proxmox.com/wiki/Network_Model Page - as there is the configuration with NAT mentioned but not that it's required to add another rule for the guests to reach the network behind the host.

Thank you!

 

[Progratron]

I just fixed using above-mentioned rule the problem of a firewall-protected VM behind the NAT... I wonder if it's still correct in 2019? Do I really have to put all those rules manually for any VM behind NAT being protected by a firewall?

 

[amoke]

all VMs...

iptables -t raw -I PREROUTING -i fwbr+ -j CT --zone 1

 

[Code-Exec]

see: https://pve.proxmox.com/wiki/Network_Model

There is an example howto setup masquerading.

I looked. There's a blank page.

 

[Code-Exec]

Thanks for the Post of this Rule (iptables -t raw -A PREROUTING -i fwbr100i0 -j CT --zone 1) - i searched around for many hours but this was not mentioned anywhere!
Please Proxmox-Team consider to spend a short text about this on the https://pve.proxmox.com/wiki/Network_Model Page - as there is the configuration with NAT mentioned but not that it's required to add another rule for the guests to reach the network behind the host.

Thank you!

This is only for VMs with ID 100. Keep in mind.

 

[Code-Exec]

I have a revision about NAT. So far, it is in Russian. It may be useful.
https://forum.proxmox.com/threads/proxmox-nat-on-gui-for-everyone.82323/

 

[tom]

I looked. There's a blank page.

View attachment 22724

https://pve.proxmox.com/wiki/Network_Configuration

 

[Code-Exec]

https://pve.proxmox.com/wiki/Network_Configuration

I have seen this information. My revision uses the recommendations from this article. But you will agree that it is much more pleasant to manage NAT from WebGUI. I understand that the path "true admin" is through the console, but still it is not very comfortable.