Proxmox VE7.1 + PfSense + Configuration Ports

[jvnet]

Hello everyone;
i am new to the whole proxmox but I managed to configure the following correctly.
Proxmox VE7.1 On a HP Proliant server and 2 NiC's

I succesfully installed pfsense vm,

I run 6 VM's aswell my 6 local home network devices corectly behind pfsense
One of my VM's is running Yunohost wich complains about ports not accesible from the outside.

I have my firewall active on the internet providers router, by allowing all trafffic on the ports needed to the wan nic from pfsense.
pfsense is then NAT Configured to send traffic on those ports to my yunohost VM

But still Yunohost complains about not being recheable from the outside on the ports.
Is there anything i am missing, being new to all this.

Do i need to look at this at the proxmox gui or as i sendet the ports to the wan nic, using vmbr0 to the pfsense ip

Thank you al for some help on this topic.

 

[bobmc]

So if understand you correctly, pfsense is running behind your ISP router - i.e your real WAN address is assigned to the router and the WAN address on pfSense is on a private LAN like 192.168.x.x ?

If this is the case, I would check that pfsense is configured to allow ip traffic from non-routeable addresses in from the WAN (see interfaces -> WAN -> Reserved Networks)

Next I would attempt to configure and confirm you could access the pfsense interface from outside your network - once you've done that you will know that external traffic is reaching the pfsense host. Once you've done that, then troubleshooting the connection to the yunohost should be simpler

 

[jvnet]

Hello bobmc thanks for this I will gonna try that later this afternoon.

But here is the correct routing : provider wan ip: xxx.xxx.xxx.xxx , Lan network ip from provider xxx.xxx.1.254
Proxmox ip xxx.xxx.1.1

Proxmox vmbr0 = xxx.xxx.1.1
Pfsense bridged over vmbr0 for wan : xxx.xxx.1.253
Pfsense second bridge vmbr1 for lan : 223.xxx.0.254 as static

And all other vm's and local workstations on dhcp on pfsense.

I have changed the Bridge for the Yunohost from vmbr1 to vmbr0 and ports are all set ok. So the forwarding on my providers router works just fine

I will see so as you advice to check the incomming traffic on wan port for pfsense.

Thanks for your advice