vm/container server setup

[zustudios]

Hi, I'm new to proxmox. I'm a newbie. I like proxmox so far I'm just having some problems setting up my first server. Pleas excuse my newbie english. I have my first server up and running(debian 8) with internet. I just have one MAJOR problem. I have Ispconfig 3 ( http://www.ispconfig.org/ ) installed ( https://www.howtoforge.com/tutorial/perfect-server-debian-8-jessie-apache-bind-dovecot-ispconfig-3/ ) .

How do I open all the ports needed to access the vm/container from the outside world (ex. ssh,ftp,panel)?
Ports like 21,22,80,443,5080,8080.

 

[zustudios]

Is this forum active?I'm not getting any help.

 

[sherminator]

Hi,

How do I open all the ports needed to access the vm/container from the outside world (ex. ssh,ftp,panel)?
Ports like 21,22,80,443,5080,8080.
View attachment 3328

are you sure that this is a Proxmox topic? Although Proxmox brings its own firewall, as far as I know it's disabled by default.
Could you please post more details about the network configurations of your Proxmox node and the VM you try to connect with?

Greets
Stephan

 

[zustudios]

I'll try and explain.My proxmox cpu is in dmz in my router. I'm not sure if it's a proxmox issue.I had no problem port forwarding and getting my server to work with virtualbox. https://www.howtoforge.com/community/threads/proxmox-ispconfig-3.56846/ I know it should work but I don't know how to set it up. I can't ssh into the vm (I don't know how it's always timed out). I can't get to my ispconfig 3 panel sign in page. If you need more screen shots just let me know.

 

[sherminator]

Hi,

could you please login via SSH to your server1 and post the output of these commands?

# cat /etc/network/interfaces

# route -n

And if your able to connect to ispconfig-3 via Proxmox console, please execute the same commands and let us know the outputs, too.
Which operating system is running on ispconfig-3?

Greets
Stephan

 

[zustudios]

I'm using debian8 + proxmox

 

[zustudios]

 

[sherminator]

Hi,
your routing table looks unusual to me. How did you install your Proxmox server? I would expect something like this:

Destination  Gateway     Genmask       Flags Metric Ref  Use Iface
0.0.0.0      192.168.1.1 0.0.0.0       UG    0      0    0   vmbr0
192.168.1.0  0.0.0.0     255.255.255.0 U     0      0    0   vmbr0

And when you post text based information please don't insert a screenshot but create a code block and copy+paste the text. So the text will be searchable and will take less space on the forum servers.
Could you also post the network configuration of isp-config3?

Greets
Stephan

 

[zustudios]

https://pve.proxmox.com/wiki/Install_Proxmox_VE_on_Debian_Jessie
I got ispconfig 3 to work in container mode but not vm mode. Ok i will use code. I'm happy using the container "just as long as I get the job done".
How do I post the network configuration of isp-config3?

 

[zustudios]

" Could you also post the network configuration of isp-config3? "

root@server1:~# cat /etc/network/interfaces
auto lo
iface lo inet loopback

auto eth0
iface eth0 inet static
    address 192.168.1.101
    netmask 255.255.255.0
    gateway 192.168.1.1

You have new mail in /var/mail/root
root@server1:~# route -n
Kernel IP routing table
Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
0.0.0.0         192.168.1.1     0.0.0.0         UG    0      0        0 eth0
192.168.1.0     0.0.0.0         255.255.255.0   U     0      0        0 eth0

 

[zustudios]

Will this work for connecting to my vm / container from the outside world? Please test ( http://zu-host.com/ ) I have 2 containers.
My host new /etc/network/interfaces:

auto lo
iface lo inet loopback
# The primary network interface

allow-hotplug eth0

auto eth0
iface eth0 inet static
  address XX.XXX.XX.XX (my public ip)
  netmask  255.255.255.0
  gateway  192.168.1.1
  broadcast  192.168.1.255
  network  192.168.1.0
  dns-nameservers 8.8.8.8 8.8.4.4




   auto vmbr0
  iface vmbr0 inet static
  address  192.168.1.100
  netmask  255.255.255.0
  gateway  192.168.1.1
  broadcast  192.168.1.255
  network  192.168.1.0
  dns-nameservers 8.8.8.8 8.8.4.4
  bridge_ports eth0
  bridge_stp off
  bridge_fd 0
   post-up echo 1 > /proc/sys/net/ipv4/ip_forward
  post-up   iptables -t nat -A POSTROUTING -s '192.168.1.101/24' -o eth0 -j MASQUERADE
  post-down iptables -t nat -D POSTROUTING -s '192.168.1.101/24' -o eth0 -j MASQUERADE

  post-up   iptables -t nat -A POSTROUTING -s '192.168.1.102/24' -o eth0 -j MASQUERADE
  post-down iptables -t nat -D POSTROUTING -s '192.168.1.102/24' -o eth0 -j MASQUERADE       
       
         
#this is my VM Nat network
     auto vmbr1
    iface vmbr1 inet static
    address 192.168.1.100
    netmask 255.255.255.0
    gateway  192.168.1.1
    broadcast  192.168.1.255
    network  192.168.1.0
    dns-nameservers 8.8.8.8 8.8.4.4

    bridge_ports none
    bridge_stp off
    bridge_fd 0
    post-up echo 1 > /proc/sys/net/ipv4/ip_forward
    post-up   iptables -t nat -A POSTROUTING -s '192.168.1.101/24' -o eth0 -j MASQUERADE
    post-down iptables -t nat -D POSTROUTING -s '192.168.1.101/24' -o eth0 -j MASQUERADE
   
    post-up   iptables -t nat -A POSTROUTING -s '192.168.1.102/24' -o eth0 -j MASQUERADE
    post-down iptables -t nat -D POSTROUTING -s '192.168.1.102/24' -o eth0 -j MASQUERADE

 

[sherminator]

Hi,

I'm still not clear about what you're trying to do.

auto eth0
iface eth0 inet static
address XX.XXX.XX.XX (my public ip)
netmask 255.255.255.0
gateway 192.168.1.1
broadcast 192.168.1.255
network 192.168.1.0
dns-nameservers 8.8.8.8 8.8.4.4

this looks wrong. You try to configure a public IP address, but the rest of the configuration refers to a private network.
Is eth0 of your Proxmox node really public reachable directly? Or is it behind a NAT?

Furthermore vmbr0 and vmbr1 have got the same IP address - that looks wrong, too.
What do you try to reach with these two bridges?
By the way vmbr1 is not connected to anything else... ("bridge_ports none").

Maybe you could draw a picture which shows your infrastructure and tell what you're trying to do.

Greets
Stephan

 

[zustudios]

I'm simply trying to setup vps web hosting. One vm is for me to use as my web hosting (most important) vm 101

1. I want both my proxmox 4 host and all of my vm / container to be able to be reached from the outside world "wide open". (the most important) .
2. I would like to test pfsense. internet > pfsense 2 > proxmox 4 > vm/container (testing ,is this possible with one nic and one public ip) vm 100

I have internet on eth0. It's linked directly .

 

[sherminator]

Is zu-host.com your domain?

# host zu-host.com
zu-host.com has address 192.168.1.101

What are you doing? I strongly believe that private IP addresses should never be a public A record.
Read this: https://www.ietf.org/proceedings/52/I-D/draft-ietf-dnsop-dontpublish-unreachable-01.txt

ok...
Publicly available machines should only be managed by experienced system administrators.
My suggestion is: Keep your hands off this public machine and go to your private (home) network first. There you try to build what you're planning to do, learning a lot about networking and virtualization. And then - with this knowledge - try it again.

Many greets and good luck
Stephan

 

[zustudios]

Ok just one thing how do I get just my web sever to be accessible to the outside world? I must have that one now. vm 101.

 

[zustudios]

I can't find anything with networking and virtualization online with proxmox 4.1 in english. I'm lost and don't know Where to start. All I want to do is learn to set up vps web hosting starting with my first vm/container. If I pay someone or buy a subscription will anyone help me set up vps web hosting?