apparently sometimes users have problems reaching outside internet with some network setups. this is the workaround a user suggested that we should add in the wiki.
Signed-off-by: Oguz Bektas <o.bek...@proxmox.com> --- pve-network.adoc | 9 +++++++++ 1 file changed, 9 insertions(+) diff --git a/pve-network.adoc b/pve-network.adoc index c61cd42..471edb4 100644 --- a/pve-network.adoc +++ b/pve-network.adoc @@ -248,6 +248,15 @@ iface vmbr0 inet static post-down iptables -t nat -D POSTROUTING -s '10.10.10.0/24' -o eno1 -j MASQUERADE ---- +NOTE: If you have firewall enabled for your CT/VM and you're having +connectivity problems with outgoing connections, you can add the following +lines in the interfaces config: + +---- +post-up iptables -t raw -I PREROUTING -i fwbr+ -j CT --zone 1 +post-down iptables -t raw -D PREROUTING -i fwbr+ -j CT --zone 1 +---- + Linux Bond ~~~~~~~~~~ -- 2.20.1 _______________________________________________ pve-devel mailing list pve-devel@pve.proxmox.com https://pve.proxmox.com/cgi-bin/mailman/listinfo/pve-devel