[pve-devel] pvefw: masquerade problems and conntrack zones

[Alexandre DERUMIER]

ok perfect.

last question, why don't we setup public ip directly on eth0 interface, instead of using pm0-pm1peer ?


----- Mail original ----- 

De: "Dietmar Maurer" <dietmar at proxmox.com> 
À: "Alexandre DERUMIER" <aderumier at odiso.com> 
Cc: pve-devel at pve.proxmox.com 
Envoyé: Mardi 11 Mars 2014 09:10:37 
Objet: RE: [pve-devel] pvefw: masquerade problems and conntrack zones 

> ok, thanks, I'll build the same setup, 
> (is pm0 address in the same range than pm1 ? ) 

No, that is another network (public internet) 

> If I understand, the vm tap is plugged on vmbr1, and nat must be done on 
> veth pair ? 

yes