[pve-devel] [PATCH docs] network: add note for possible fix/workaround in NAT setup

[Oguz Bektas]

apparently sometimes users have problems reaching outside internet with
some network setups. this is the workaround a user suggested that
we should add in the wiki.

Signed-off-by: Oguz Bektas <o.bektas at proxmox.com>
---
 pve-network.adoc | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/pve-network.adoc b/pve-network.adoc
index c61cd42..471edb4 100644
--- a/pve-network.adoc
+++ b/pve-network.adoc
@@ -248,6 +248,15 @@ iface vmbr0 inet static
         post-down iptables -t nat -D POSTROUTING -s '10.10.10.0/24' -o eno1 -j MASQUERADE
 ----
 
+NOTE: If you have firewall enabled for your CT/VM and you're having
+connectivity problems with outgoing connections, you can add the following
+lines in the interfaces config:
+
+----
+post-up   iptables -t raw -I PREROUTING -i fwbr+ -j CT --zone 1
+post-down iptables -t raw -D PREROUTING -i fwbr+ -j CT --zone 1
+----
+
 
 Linux Bond
 ~~~~~~~~~~
-- 
2.20.1