Zentyal on Proxmox (openvz) - Iptables problems and configuration routes

pablov2

New Member
May 27, 2011
9
0
1
Hi all,

I want to install a Zentyal in a openvz container on Proxmox. I have yet installed zentyal, and it is running. But I have some problems just now,

I want use zentyal to forwarding routes to others virtuals machines, port 80 to a web server virtual machine, and others...

First I had some problemes with Firewall Module of zentyal, because I had not changed some configuration parameters in /etc/vz/vz.conf (you can see it here http://www.leopoldomaestro.com/habilitar-iptables-para-los-containers-openvz-en-proxmox/), secondly I had to reload kernel modules of the containers.. you can see it here: http://forum.openvz.org/index.php?t=msg&goto=38107&

Now, all it is running but I cant do port forwarding to port 80 on other VM.

network configuration in zentyal:
Code:
#VLAN internal
iface eth0 inet static
	address 10.30.X.120
	netmask 255.255.255.0
	broadcast 10.30.X.255
	gateway 10.30.X.1

#VLAN external
iface eth1 inet static
	address 10.90.X.33
	netmask 255.255.255.248
	broadcast 10.90.X.39

Routes
Code:
Kernel IP routing table
Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
10.90.X.32     *               255.255.255.248 U     0      0        0 eth1
10.30.X.0     *               255.255.255.0   U     0      0        0 eth0
default         10.90.X.38     0.0.0.0         UG    0      0        0 eth1


IPTABLES
Code:
iptables  -t nat  -L -n
Chain PREROUTING (policy ACCEPT)
target     prot opt source               destination         
premodules  all  --  0.0.0.0/0            0.0.0.0/0           
DNAT       udp  --  0.0.0.0/0            10.90.X.33         udp dpt:81 to:10.30.X.222:80 
DNAT       tcp  --  0.0.0.0/0            10.90.X.33         tcp dpt:81 to:10.30.X.222:80 
DNAT       udp  --  0.0.0.0/0            10.90.X.33         udp dpt:80 to:10.30.X.222 
DNAT       tcp  --  0.0.0.0/0            10.90.X.33         tcp dpt:80 to:10.30.X.222 

Chain POSTROUTING (policy ACCEPT)
target     prot opt source               destination         
postmodules  all  --  0.0.0.0/0            0.0.0.0/0           
SNAT       all  -- !10.90.X.33          0.0.0.0/0           to:10.90.X.33 

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination         

Chain postmodules (1 references)
target     prot opt source               destination         

Chain premodules (1 references)
target     prot opt source               destination

With this configuration I try to access web server hosted in 10.30.X.222 but it dont run...