18
submitted 2 years ago* (last edited 2 years ago) by genuineparts@infosec.pub to c/selfhosted@lemmy.world

One is the route from my Proxmox (vimes) server to my NAS, (colon) going via my Router (pessimal) (as it should be) Second one is my NAS going to Proxmox directly. However I didn't set any static routes and this is causing issues as the Router Firewalls those Asymmetric Connections. This is happening since I upgraded Proxmox... I am not the best at network stuff, so if someone has some pointers I'd be most grateful.

I'm a moron and had a wrong subnet mask.

you are viewing a single comment's thread
view the rest of the comments
[-] towerful@programming.dev 10 points 2 years ago

If they are on the same subnet, why are they going via the router? Surely the NIC/OS will know it's a local address within its subnet, and will send it directly; as opposed to not knowing where to send the packet, so letting the router deal with it.

I'm assuming you are using a standard 24 bit subnet mask, because you haven't provided anything that indicates otherwise and the issue you present would be indicative of a local link being used - this possible

[-] genuineparts@infosec.pub 2 points 2 years ago* (last edited 2 years ago)

You got it perfectly right! It was the subnetting... Thanks!

[-] towerful@programming.dev 2 points 2 years ago

That whole "shortest path" has caught me out before (tho in a different way)!
And firewall logs of "state violation" aren't always helpful when that's pretty much the default log message

[-] genuineparts@infosec.pub 1 points 2 years ago

Absolutely. But I at least realized it had to be asymmetric routing... because if I didn't I would have been even more puzzled. Because even setting firewall rules wouldn't fix it then. I'm glad there are people here that understand that sometimes we brain fart and they give you a great pointer! Like the second I saw netmask I knew what was wrong and facepalmed.

this post was submitted on 27 May 2024
18 points (95.0% liked)

Selfhosted

62781 readers
664 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules:

Detailed Rules Post

  1. Be civil.

  2. No spam.

  3. Posts are to be related to self-hosting.

  4. Don't duplicate the full text of your blog or readme if you're providing a link.

  5. Submission headline should match the article title.

  6. No trolling.

  7. Promotion posts require active participation, with an account that is at least 30 days old. F/LOSS without a paywall has exceptions, with requirements. See the rules link for details. Tags [CBH] or [AIP] are required, see the links in Rule 8 for details.

  8. AI-related discussions and AI-involved promotional posts have additional requirements for tagging, as noted in Rule 7 and the AI & Promotional Post Expanded Rules post, and find example disclosures here.

Resources:

Any issues on the community? Report it using the report flag.

Questions? DM the mods!

founded 3 years ago
MODERATORS