Windows VM no RDP (public IP)

[welcometopwn]

Hello,

for some reason i am not able to connect via RDP to my Virtual Machine that has a Public IP assigned. My machine is hosted by Hetzner and i followed their guide years ago when i setup Proxmox.

For the VM itself i use a Win Server 2022. I ran Wireshark on the VM and i can not see the port 3389 being rejected or anything.

Things that i've checked/done

• RDP is active and NLA is disabled
• Port 3389
• Windows Firewall Rule (also disabled the firewall temporarily)
• User has RDP access
• Other TCP ports like 135 and 443 show up in Wireshark
• tcpdump shows the right ip and port on the host machine
• IP on VM is set static to static and IPv6 disabled temporarily
• Proxmox Firewall is turned off
• RDP works locally

Host /etc/network/interfaces

auto lo
iface lo inet loopback

#Physical Port
auto enp5s0
iface enp5s0 inet manual


#External
auto vmbr0
iface vmbr0 inet static
        address xx.yy.5.2 #Main IP
        netmask 255.255.255.255
        hwaddress xx:xx:yy:yy #needed since 7.0
        gateway xx.yy.5.1
        pointopoint xx.yy.5.1
        bridge_ports enp5s0
        bridge_stp off
        bridge_fd 0
        up route add -net xx.xx.xx.5.0 netmask 255.255.255.224 gw xx.xx.5.1 dev vmbr0
        up ip route add xx.yy.5.20/32 dev vmbr0
        up ip route add xx.yy.5.23/32 dev vmbr0
        up ip route add xx.yy.5.33/32 dev vmbr0
        up ip route add xx.yy.5.38/32 dev vmbr0
        up ip route add xx.yy.5.45/32 dev vmbr0



#Internal
auto vmbr1
iface vmbr1 inet static
  address 192.168.5.254
  netmask 255.255.255.0
  bridge-ports none
  bridge-stp off
  bridge-fd 0
  post-up echo 1 > /proc/sys/net/ipv4/ip_forward
  post-up iptables -t nat -A POSTROUTING -s '192.168.5.0/24' -o vmbr1 -j MASQUERADE
  post-down iptables -t nat -D POSTROUTING -s '192.168.5.0/24' -o vmbr1 -j MASQUERADE

Anyone had something similar perhaps and knows the answer to this?

Thanks!

 

[bobmc]

Should this not be
post-up iptables -t nat -A POSTROUTING -s '192.168.5.0/24' -o vmbr0 -j MASQUERADE post-down iptables -t nat -D POSTROUTING -s '192.168.5.0/24' -o vmbr0 -j MASQUERADE