PROXMOX - PFSENSE - MAIL SERVER or PXM Gateway

tibox

New Member
Nov 30, 2022
3
0
1
Hello everyone,

I'm new to the community and to this hypervisor.
Which I love, since my first install.

Currently, I'm on proxmox 7
A wan card with ip wan
I have created 2 other interfaces for my pfsense
10.0.0.2 LAN
10.0.0.1 WAN
No worries on NAT side, my vms are reachable in ssh/ping/ etc thanks to iptables rules, and then Pfsense

HAPROXY with 2 fronts
1st HTTP to S
2nd HTTPS
I have several different vms which are reachable or not on the internet according to my wish.
The proxmox + pfsense combination is just fantastic.

No worries on SSH side, my vms are reachable in ssh thanks to iptables rules, and then the FW

On the other hand, I can't manage on the mail server side.

Let me make an iptable rule that forwards from port 25 to port 25 on my pfsense. In the rainloop logs, I have refused connections

The same if I do a cust of my ports on iptables, connection refused.

I have used the same rules on the pfsense side as on the ssh side (so if my ssh rules work, just for 25, 465, 993, 143, on a single machine it should not be a problem)

Exemple :
post-up iptables -t nat -A PREROUTING -i vmbr0 -p tcp --dport 25 -j DNAT --to 10.0.0.2:25
post-down iptables -t nat -D PREROUTING -i vmbr0 -p tcp --dport 25 -j DNAT --to 10.0.0.2:25
post-up iptables -t nat -A PREROUTING -i vmbr0 -p tcp --dport 25000 -j DNAT --to 10.0.0.2:25000
post-down iptables -t nat -D PREROUTING -i vmbr0 -p tcp --dport 25000 -j DNAT --to 10.0.0.2:25000
When I install postfix on the proxmox node, I get smtp through.

I have the impression for the moment of an error in my iptables, but then again, why does it work well in ssh?

I'm missing something.

On the mail server, the ports are open, but nothinig on the different log ( normal its block by the node)

Any suggestions ?

Thanx a lot (L)
 
error on my vm finally
Dec 1 21:21:31 mail postfix/smtp[5808]: C593A180700: to=<tiboc@fwww.fr>, relay=none, delay=857, delays=857/0.01/0.03/0, dsn=4.4.1, status=deferred (connect to mawwwl.www.fr[@ippubliqueproxmox:25: connection refused)
 

About

The Proxmox community has been around for many years and offers help and support for Proxmox VE, Proxmox Backup Server, and Proxmox Mail Gateway.
We think our community is one of the best thanks to people like you!

Get your subscription!

The Proxmox team works very hard to make sure you are running the best software and getting stable updates and security enhancements, as well as quick enterprise support. Tens of thousands of happy customers have a Proxmox subscription. Get yours easily in our online shop.

Buy now!