Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    URGENT HELP libvirt kvm

    Scheduled Pinned Locked Moved Virtualization
    42 Posts 4 Posters 9.1k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • V
      volga629
      last edited by

      Look like firewall is not running. Logs are from Sat 5 midnight. That why you can access it.

      1 Reply Last reply Reply Quote 0
      • V
        volga629
        last edited by

        Check screenshot from PFSense where on tcpdump I am capture traffic on BRIDGE0. Server on LAN is send ping, but nothing coming back. look like firewall not running or something like that.

        PFSensePing.png
        PFSensePing.png_thumb

        1 Reply Last reply Reply Quote 0
        • T
          thermo
          last edited by

          show the same capture but on pfsense WAN (not bridge0)

          1 Reply Last reply Reply Quote 0
          • V
            volga629
            last edited by

            BRIDGE0 is the WAN

            1 Reply Last reply Reply Quote 0
            • V
              volga629
              last edited by

              In first my post I have small schema design.

              1 Reply Last reply Reply Quote 0
              • T
                thermo
                last edited by

                ok, just read the thread again. Your setup looks messed up.
                no other suggestion apart from restore from backup. :-)

                1 Reply Last reply Reply Quote 0
                • V
                  volga629
                  last edited by

                  I think it some thing to do with firewall. Logs in web UI is not writing still from midnight Sep 5.

                  1 Reply Last reply Reply Quote 0
                  • johnpozJ
                    johnpoz LAYER 8 Global Moderator
                    last edited by

                    well its not pinging now.

                    An intelligent man is sometimes forced to be drunk to spend time with his fools
                    If you get confused: Listen to the Music Play
                    Please don't Chat/PM me for help, unless mod related
                    SG-4860 24.11 | Lab VMs 2.8, 24.11

                    1 Reply Last reply Reply Quote 0
                    • V
                      volga629
                      last edited by

                      I shutdown old unit. And in progress of rebuild to new unit. Left restore firewall rules.  Because I need return site online.
                      So far everything works interfaces same setup as before all the same. And don't have idea what happened, I suspect that some thing happened with firewall, because I tried restore form backup.

                      I am still not back online 100% but,

                      I want tell Everyone here HUGE THANK YOU FOR SUPPORT.

                      1 Reply Last reply Reply Quote 0
                      • johnpozJ
                        johnpoz LAYER 8 Global Moderator
                        last edited by

                        so now do your ping test with 8.8.8.8 on wan.. Does it show you public or private – there just is no freaking way it could work with private IP and no nat.

                        An intelligent man is sometimes forced to be drunk to spend time with his fools
                        If you get confused: Listen to the Music Play
                        Please don't Chat/PM me for help, unless mod related
                        SG-4860 24.11 | Lab VMs 2.8, 24.11

                        1 Reply Last reply Reply Quote 0
                        • V
                          volga629
                          last edited by

                          OK I was be able restore firewall and all settings. Site back online 100%. I still be live that on old vm, firewall is broken. On new vm same setup, everything work right now 100%.

                          Here o new vm when NAT and firewall works. On old one I so on WAN (BRIDGE0) interface private IP which mean something happened with firewall.

                          Again huge THANK you for help.

                          
                          17:07:25.409679 IP 198.50.221.189 > 8.8.8.8: ICMP echo request, id 8256, seq 1, length 64
                          17:07:25.432903 IP 8.8.8.8 > 198.50.221.189 ICMP echo reply, id 8256, seq 1, length 64
                          
                          
                          1 Reply Last reply Reply Quote 0
                          • johnpozJ
                            johnpoz LAYER 8 Global Moderator
                            last edited by

                            there you go so now you have a different wan IP.. but yes that makes sense.. Not what you were seeing before where you seeing on the wan 10.x as source address.

                            An intelligent man is sometimes forced to be drunk to spend time with his fools
                            If you get confused: Listen to the Music Play
                            Please don't Chat/PM me for help, unless mod related
                            SG-4860 24.11 | Lab VMs 2.8, 24.11

                            1 Reply Last reply Reply Quote 0
                            • First post
                              Last post
                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.