I have a Fedora (35) workstation with some VMs running on a virtual LAN and I want to open
service(s) to the local Physical LAN. Goal is to make an HTTP service running on
192.168.122.11:80
visible to 192.168.1.* as 192.168.1.62:80
What am I missing!?!?
Office Network
192.168.1.*
192.168.1.62 Fedora Workstation IP
VirtD network
192.168.122.*
192.168.122.11 Virtual Machine IP
I have a script file as
firewall-cmd --add-service=http
firewall-cmd \
--add-forward-port=port=80:proto=tcp:toport=80:toaddr=192.168.122.11
firewall-cmd --add-masquerade
firewall-cmd --add-forward
firewall-cmd --add-port=80/tcp
and sysctll -p reports:
net.ipv4.ip_forward = 1
But when I attempt to get the service
wget
http://192.168.1.62
Connecting to 192.168.1.62:80... failed: Connection refused.
Although I can get the service directly
wget
http://192.168.122.11
2023-07-11 15:33:04 (86.1 MB/s) - ‘index.html’ saved [612/612]
# This is the default target
[root@tesla setup]# firewall-cmd --list-all
FedoraWorkstation (active)
target: default
icmp-block-inversion: no
interfaces: wlp6s0
sources:
services: dhcpv6-client http https mdns samba samba-client ssh
ports: 1025-65535/udp 1025-65535/tcp 80/tcp 443/tcp
protocols:
forward: yes
masquerade: yes
forward-ports:
port=80:proto=tcp:toport=80:toaddr=192.168.122.11
port=443:proto=tcp:toport=443:toaddr=192.168.122.11
source-ports:
icmp-blocks:
rich rules:
# And I'm pretty sure this is related - I've tried opening up everything I can
think of:
[root@tesla setup]# firewall-cmd --list-all --zone=libvirt
libvirt (active)
target: ACCEPT
icmp-block-inversion: no
interfaces: virbr0
sources:
services: dhcp dhcpv6 dns ssh tftp
ports: 1-65534/tcp
protocols: icmp ipv6-icmp
forward: yes
masquerade: yes
forward-ports:
source-ports:
icmp-blocks:
rich rules: