Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    URGENT HELP libvirt kvm

    Scheduled Pinned Locked Moved Virtualization
    42 Posts 4 Posters 9.1k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • V
      volga629
      last edited by

      Not sure why it working from WAN, I don't see any rules which will allow the access.

      1 Reply Last reply Reply Quote 0
      • V
        volga629
        last edited by

        Look like firewall is not running. Logs are from Sat 5 midnight. That why you can access it.

        1 Reply Last reply Reply Quote 0
        • V
          volga629
          last edited by

          Check screenshot from PFSense where on tcpdump I am capture traffic on BRIDGE0. Server on LAN is send ping, but nothing coming back. look like firewall not running or something like that.

          PFSensePing.png
          PFSensePing.png_thumb

          1 Reply Last reply Reply Quote 0
          • T
            thermo
            last edited by

            show the same capture but on pfsense WAN (not bridge0)

            1 Reply Last reply Reply Quote 0
            • V
              volga629
              last edited by

              BRIDGE0 is the WAN

              1 Reply Last reply Reply Quote 0
              • V
                volga629
                last edited by

                In first my post I have small schema design.

                1 Reply Last reply Reply Quote 0
                • T
                  thermo
                  last edited by

                  ok, just read the thread again. Your setup looks messed up.
                  no other suggestion apart from restore from backup. :-)

                  1 Reply Last reply Reply Quote 0
                  • V
                    volga629
                    last edited by

                    I think it some thing to do with firewall. Logs in web UI is not writing still from midnight Sep 5.

                    1 Reply Last reply Reply Quote 0
                    • johnpozJ
                      johnpoz LAYER 8 Global Moderator
                      last edited by

                      well its not pinging now.

                      An intelligent man is sometimes forced to be drunk to spend time with his fools
                      If you get confused: Listen to the Music Play
                      Please don't Chat/PM me for help, unless mod related
                      SG-4860 24.11 | Lab VMs 2.8, 24.11

                      1 Reply Last reply Reply Quote 0
                      • V
                        volga629
                        last edited by

                        I shutdown old unit. And in progress of rebuild to new unit. Left restore firewall rules.  Because I need return site online.
                        So far everything works interfaces same setup as before all the same. And don't have idea what happened, I suspect that some thing happened with firewall, because I tried restore form backup.

                        I am still not back online 100% but,

                        I want tell Everyone here HUGE THANK YOU FOR SUPPORT.

                        1 Reply Last reply Reply Quote 0
                        • johnpozJ
                          johnpoz LAYER 8 Global Moderator
                          last edited by

                          so now do your ping test with 8.8.8.8 on wan.. Does it show you public or private – there just is no freaking way it could work with private IP and no nat.

                          An intelligent man is sometimes forced to be drunk to spend time with his fools
                          If you get confused: Listen to the Music Play
                          Please don't Chat/PM me for help, unless mod related
                          SG-4860 24.11 | Lab VMs 2.8, 24.11

                          1 Reply Last reply Reply Quote 0
                          • V
                            volga629
                            last edited by

                            OK I was be able restore firewall and all settings. Site back online 100%. I still be live that on old vm, firewall is broken. On new vm same setup, everything work right now 100%.

                            Here o new vm when NAT and firewall works. On old one I so on WAN (BRIDGE0) interface private IP which mean something happened with firewall.

                            Again huge THANK you for help.

                            
                            17:07:25.409679 IP 198.50.221.189 > 8.8.8.8: ICMP echo request, id 8256, seq 1, length 64
                            17:07:25.432903 IP 8.8.8.8 > 198.50.221.189 ICMP echo reply, id 8256, seq 1, length 64
                            
                            
                            1 Reply Last reply Reply Quote 0
                            • johnpozJ
                              johnpoz LAYER 8 Global Moderator
                              last edited by

                              there you go so now you have a different wan IP.. but yes that makes sense.. Not what you were seeing before where you seeing on the wan 10.x as source address.

                              An intelligent man is sometimes forced to be drunk to spend time with his fools
                              If you get confused: Listen to the Music Play
                              Please don't Chat/PM me for help, unless mod related
                              SG-4860 24.11 | Lab VMs 2.8, 24.11

                              1 Reply Last reply Reply Quote 0
                              • First post
                                Last post
                              Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.