Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Proxmox Pfsense only 1 public IP

    Scheduled Pinned Locked Moved
    Virtualization
    2
    22
    1.8k
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • stephenw10S
      stephenw10 Netgate Administrator
      last edited by

      So 10.0.0.2 is the pfSense WAN IP and 10.0.0.1 is the Proxmox host? Or some other VM you are testing from?

      We do see that one SIP packet from some external address. And pfSense has opened a state for it so its being passed. Your WAN firewall rules are currently wide open.

      Make sure you are actively trying to open an SSH connection when you check the states.

      Steve

      F 1 Reply Last reply Reply Quote 0
      • stephenw10S
        stephenw10 Netgate Administrator
        last edited by

        It was the checksum off-loading? You were using vtnet NICs in Proxmox?

        F 1 Reply Last reply Reply Quote 0
        • F
          Faker03 @stephenw10
          last edited by

          @stephenw10
          Yes 10.0.0.1 is the Proxmox and 10.0.0.2 is the Pfsense.
          I´m looking while i try to connnect to SSH. There are no new entries.

          1 Reply Last reply Reply Quote 0
          • stephenw10S
            stephenw10 Netgate Administrator
            last edited by

            But you are now able to connect to the Minecraft server with hardware checksum off loading disabled?

            F 1 Reply Last reply Reply Quote 0
            • F
              Faker03 @stephenw10
              last edited by

              @stephenw10 It was working for 10 sec then the SSH refused again.
              I think that i use vtnet on Nic but i dont know what this mean.

              1 Reply Last reply Reply Quote 0
              • F
                Faker03 @stephenw10
                last edited by

                @stephenw10 no at the moment it does not work.

                1 Reply Last reply Reply Quote 0
                • stephenw10S
                  stephenw10 Netgate Administrator
                  last edited by

                  Ok, where are you testing from? What is the source address?

                  The pfSense WAN is wide open so you should see states created for any traffic that hits it. It looks like your test traffic never makes it to pfSense so either Proxmox is not forwarding it or it never arrives at Proxmox.

                  Steve

                  F 1 Reply Last reply Reply Quote 0
                  • F
                    Faker03 @stephenw10
                    last edited by

                    @stephenw10
                    I have on the LAN a DHCP configured with the IP net 192.168.1.1/24 so the Container in Proxmox getting an IP from that.
                    I´ve checked the Ip adress with the NAT Rules.
                    I also checked the status from the SSH Server

                    So far as i know should be the rules forward all traffic to the pfsense.

                    37baeefc-0548-419a-99f6-144660706ae3-image.png

                    a80cd92a-0fb1-45d2-8acc-0217d8ac1e4e-image.png

                    2022-10-21_15h08_49.png
                    75e68e2b-499d-4108-9e4f-7fe06156a93d-image.png

                    1 Reply Last reply Reply Quote 0
                    • stephenw10S
                      stephenw10 Netgate Administrator
                      last edited by

                      It doesn't look like a problem with the container, the traffic is not reaching the pfSense WAN.

                      How are you accessing the pfSense webgui? From the same place? What is that place? Something outside the Proxmox public IP?

                      Steve

                      F 1 Reply Last reply Reply Quote 0
                      • stephenw10S stephenw10 moved this topic from General pfSense Questions on
                      • F
                        Faker03 @stephenw10
                        last edited by

                        @stephenw10
                        I acces the Pfsense via SSh over the Proxmox.
                        I map the Port to my Localhost
                        So via localhost2022-10-21_15h41_54.png

                        1 Reply Last reply Reply Quote 0
                        • stephenw10S
                          stephenw10 Netgate Administrator
                          last edited by

                          Ah, OK.

                          You should be able to access it directly if Proxmox is correctly forwarding all traffic to the pfSense WAN. That should include port 443 to the pfSense webgui.

                          F 1 Reply Last reply Reply Quote 0
                          • F
                            Faker03 @stephenw10
                            last edited by

                            @stephenw10
                            I know that i was able to do that but at the moment it do not work. So it seems that Proxmox do not forward all traffic ?

                            1 Reply Last reply Reply Quote 0
                            • stephenw10S
                              stephenw10 Netgate Administrator
                              last edited by

                              That's what it looks like to me.

                              1 Reply Last reply Reply Quote 0
                              • First post
                                Last post