Shorewall/DNAT question

[panyasan]

Hi, I am new to proxmox and to advanced network administration in general. I am using Shorewall as firewall.

I have a couple of KVM instances running on a private network (10.1.1.x). I have no trouble forwarding SSH traffic to them:

# /etc/shorewall/rules
SSH/ACCEPT		net		$FW 
SSH/ACCEPT		net		dmz
DNAT 			net		loc:10.1.1.4:22		  tcp	10422

This way, I can reach the local machine on the proxmox server's port 10422.

However, now I want to expose a zope server running on port 8081 on my KVM instance.

ACCEPT		net		$FW  				tcp		10481
ACCEPT		net		dmz  				tcp		10481
DNAT 		net		loc:10.1.1.4:8081		tcp		10481

But I cannot reach the server on port 10481 on the proxmox server's IP. What might I be doing wrong? It would be great if someone can point me into the right direction? Thanks!

Christian

 

[panyasan]

Ok, I found it:

ACCEPT	net	$FW			tcp	10481
ACCEPT	net	dmz			tcp	8081 # Here was the mistake
DNAT	net	loc:10.1.1.4:8081	tcp	10481