apparently sometimes users have problems reaching outside internet with
some network setups. this is the workaround a user suggested that
we should add in the wiki.

Signed-off-by: Oguz Bektas <o.bek...@proxmox.com>
---
 pve-network.adoc | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/pve-network.adoc b/pve-network.adoc
index c61cd42..471edb4 100644
--- a/pve-network.adoc
+++ b/pve-network.adoc
@@ -248,6 +248,15 @@ iface vmbr0 inet static
         post-down iptables -t nat -D POSTROUTING -s '10.10.10.0/24' -o eno1 -j 
MASQUERADE
 ----
 
+NOTE: If you have firewall enabled for your CT/VM and you're having
+connectivity problems with outgoing connections, you can add the following
+lines in the interfaces config:
+
+----
+post-up   iptables -t raw -I PREROUTING -i fwbr+ -j CT --zone 1
+post-down iptables -t raw -D PREROUTING -i fwbr+ -j CT --zone 1
+----
+
 
 Linux Bond
 ~~~~~~~~~~
-- 
2.20.1

_______________________________________________
pve-devel mailing list
pve-devel@pve.proxmox.com
https://pve.proxmox.com/cgi-bin/mailman/listinfo/pve-devel

Reply via email to