Proxmox Firewall for NAT

Thanks for the Post of this Rule (iptables -t raw -A PREROUTING -i fwbr100i0 -j CT --zone 1) - i searched around for many hours but this was not mentioned anywhere!
Please Proxmox-Team consider to spend a short text about this on the https://pve.proxmox.com/wiki/Network_Model Page - as there is the configuration with NAT mentioned but not that it's required to add another rule for the guests to reach the network behind the host.

Thank you!
 
I just fixed using above-mentioned rule the problem of a firewall-protected VM behind the NAT... I wonder if it's still correct in 2019? Do I really have to put all those rules manually for any VM behind NAT being protected by a firewall?
 
  • Like
Reactions: davidweil
Thanks for the Post of this Rule (iptables -t raw -A PREROUTING -i fwbr100i0 -j CT --zone 1) - i searched around for many hours but this was not mentioned anywhere!
Please Proxmox-Team consider to spend a short text about this on the https://pve.proxmox.com/wiki/Network_Model Page - as there is the configuration with NAT mentioned but not that it's required to add another rule for the guests to reach the network behind the host.

Thank you!
This is only for VMs with ID 100. Keep in mind.
 

About

The Proxmox community has been around for many years and offers help and support for Proxmox VE, Proxmox Backup Server, and Proxmox Mail Gateway.
We think our community is one of the best thanks to people like you!

Get your subscription!

The Proxmox team works very hard to make sure you are running the best software and getting stable updates and security enhancements, as well as quick enterprise support. Tens of thousands of happy customers have a Proxmox subscription. Get yours easily in our online shop.

Buy now!