Routed Masquerading (NAT), issues accessing service form "inside"


New Member
Feb 19, 2019

Dedicated server with only one public ip and NIC, so have set up vmbr network with Masquerading (NAT).
On node Port 80/443 is forwarded (with iptables) to LXC container running NGINX, that functions as a reverse proxy to some other LXC containers on same node and vmbr.
All is working fine, when i access the domains setup in NGINX from the outside world.

On same Node and vmbr, have set up Windows VM. Internet access is working fine.
But when trying to access the domains setup in the NGINX LXC container, i get ERR_CONNECTION_REFUSED. Can't find any trace in NGINX logs.

Firewall is disabled, and no restrictions are setup in NGINX. All containers and VM's on same vmbr and it's network
Last edited:
Hello there,
there are three types of hosting shared,reseller and dedicated the best one is dedicated hosting because it is fast and robust.
To consider this issue it is necessary to see IP's configuration data (/etc/network/interface and iptables-save from host as well as routing tables, also from windows as well as from inside the container).


The Proxmox community has been around for many years and offers help and support for Proxmox VE, Proxmox Backup Server, and Proxmox Mail Gateway.
We think our community is one of the best thanks to people like you!

Get your subscription!

The Proxmox team works very hard to make sure you are running the best software and getting stable updates and security enhancements, as well as quick enterprise support. Tens of thousands of happy customers have a Proxmox subscription. Get yours easily in our online shop.

Buy now!