[SOLVED, user error] Proxmox not conncected to internet, but is reachable on LAN

[SOLVED]
Turns out I'm just a bigger moron than I thought. The MAC address of my server had accidentally been flagged in my router for black listing.

As the title says, my proxmox host is apparently not able to reach the internet anymore, not sure for how long this has been an issue, I rarely work on the host itself. It can ping other devices on my network just fine, and other devices can ping it. I can also SSH in to it and access the web interface. My VMs are connected to the internet without any issues. I don't need to access the host remotely/outside my home network, this is just for updating it etc.

I can't see the host under active devices in my router though.

I have been trying to figure why, but so far without any luck.

nickwitha_k ,

Try a traceroute to something like 9.9.9.9 and google's IP. You're able to resolve things ok. So, not DNS. Need to find out where the traffic is going to die.

Also, try a curl https://google.com -vvv. This should give some more info on what is happening to TCP traffic.

DreadPotato OP ,
@DreadPotato@sopuli.xyz avatar

this is the output when i run curl httpS://google.com -vvv

https://sopuli.xyz/pictrs/image/b7bcdd57-8b0a-450d-bbdd-d0ff4635a5d8.webp

possiblylinux127 ,
@possiblylinux127@lemmy.zip avatar

Check your gateway

DreadPotato OP ,
@DreadPotato@sopuli.xyz avatar

It is set to my router IP

possiblylinux127 ,
@possiblylinux127@lemmy.zip avatar

Can you ping 1.1.1.1?

DreadPotato OP ,
@DreadPotato@sopuli.xyz avatar

no

possiblylinux127 ,
@possiblylinux127@lemmy.zip avatar

What message are you seeing?

DreadPotato OP ,
@DreadPotato@sopuli.xyz avatar

Nothing, and it just reports 100% packet loss when I terminate the ping command.

possiblylinux127 ,
@possiblylinux127@lemmy.zip avatar

What is the output of ip route?

DreadPotato OP ,
@DreadPotato@sopuli.xyz avatar

https://sopuli.xyz/pictrs/image/40a59c77-579b-48e2-b48e-9629a5bed4ae.webp

possiblylinux127 ,
@possiblylinux127@lemmy.zip avatar

That looks good. I also have a Proxmox cluster so if you want something to compare too. Maybe try deleting your network settings and then recreating.

tvcvt ,

This really sounds like a problem with the default route. What’s the output of ip route? That should give us some hints about what’s up.

DreadPotato OP ,
@DreadPotato@sopuli.xyz avatar

this is the output of ip route.

192.168.68.1 is my router, 192.168.68.120 is the proxmox host

https://sopuli.xyz/pictrs/image/2343829c-e196-4211-9173-ca95d02e354a.webp

tvcvt ,

Cool. That looks right. Have you checked that the bridge is set up properly and that the router doesn’t have anything silly going on for that subnet?

PVE’s network settings are in /etc/network/interfaces and that’s where you can see how the bridge is set up.

It might be beneficial to know more about your network. Is this the only subnet or do you have a bunch of VLANs? Can other devices on the subnet ping outbound? Have you looked at the firewall on PVE?

DreadPotato OP ,
@DreadPotato@sopuli.xyz avatar

this is the contents of the interfaces file

https://sopuli.xyz/pictrs/image/98b38961-e0ab-4526-8ab1-52e249ca67d9.webp

I don't have anythiung seperated in to different VLANs, and i only use this single subnet. all other devices can ping outbound without issues.

Decronym Bot , (edited )

Acronyms, initialisms, abbreviations, contractions, and other phrases which expand to something larger, that I've seen in this thread:

Fewer Letters More Letters
DHCP Dynamic Host Configuration Protocol, automates assignment of IPs when connecting to a network
DNS Domain Name Service/System
IP Internet Protocol
PCIe Peripheral Component Interconnect Express

[Thread for this sub, first seen 1st Apr 2024, 16:45]
[FAQ] [Full list] [Contact] [Source code]

walden ,

Does it work after a reboot? I vaguely remember having this problem on my old motherboard. Adding a PCIe LAN adapter and switching everything over solved it for me. Now I have a new mobo and it doesn't have any network problems.

DreadPotato OP ,
@DreadPotato@sopuli.xyz avatar

Nope, reboot doesn't change anything

monty33 ,

Sounds like potentially a DNS issue

DreadPotato OP ,
@DreadPotato@sopuli.xyz avatar

This is what I'm thinking too, but I don't know how to fix it.

MangoPenguin ,
@MangoPenguin@lemmy.blahaj.zone avatar

Do you have a nameserver set under System > DNS?

DreadPotato OP ,
@DreadPotato@sopuli.xyz avatar

It's pointing to the IP of my Adguard (located on a different machine)

sailingbythelee ,

Have you tried setting the nameserver to Google or Cloudflare to see if that works?

DreadPotato OP ,
@DreadPotato@sopuli.xyz avatar

i have, it doesn't work. I can ping my Adguard without issues though.

sailingbythelee ,

I suppose you have also logged into your Adguard server to verify that it can ping the internet?

In other words, you have successfully pinged Proxmox --> Adguard and Adguard --> Internet?

DreadPotato OP ,
@DreadPotato@sopuli.xyz avatar

Yes, adguard has access to internet

BearOfaTime ,

Is the host configured with static IP or DHCP? Either way, verify it has the correct DNS config.

Personally I use static for any device that hosts a service.

What happens if you ping Yahoo.com from the console in Proxmox? It should show the DNS server IP it's using for resolution.

DreadPotato OP , (edited )
@DreadPotato@sopuli.xyz avatar

It's set to static, I also do that for anything that hosts something.

It won't ping yahoo.com at all, it just reports 100% packet loss.

Edit: just realised that it won't ping my gateway/router either. It's pinging all other devices on my network just fine though.
https://sopuli.xyz/pictrs/image/b297d4a3-7edf-458c-b490-e35bdc2caa7a.webp

Phrey ,

If you can't ping your gateway, then you have a problem with your interface configuration.

Do you need it to be on a specific VLAN or something else?

DreadPotato OP ,
@DreadPotato@sopuli.xyz avatar

No i haven't split anything in to separate VLANs

PlexSheep ,

Can you dig @9.9.9.9? If so, its certainly DNS. If it's not DNS, perhaps try to check your iptables iptables -L && iptables -t nat -L.

DreadPotato OP ,
@DreadPotato@sopuli.xyz avatar

I'm not really sure what to look for, I'm not very experienced in network, but this is the output i get

https://sopuli.xyz/pictrs/image/9fad112e-c817-41e2-8bef-985d7b22696d.webp

PlexSheep ,

From the output, you don't have any routing rules for your machine that block outgoing traffic. The dig command confirms that you can talk to servers. 9.9.9.9 is a common DNS Server. Based off of this, it seems like your problem is that your system has a bad DNS configuration (it's always DNS).

Can you parhaps cat /etc/resolv.con? This file normally contains the used DNS servers for Linux systems, unless using special software.

DreadPotato OP ,
@DreadPotato@sopuli.xyz avatar

sure

https://sopuli.xyz/pictrs/image/11bfae34-657e-44d2-afac-6a1cf5135a06.webp

PlexSheep ,

Okay, no external software for DNS management present here. Is that ip a working DNS Server? Is it your server itself perhaps?

DreadPotato OP , (edited )
@DreadPotato@sopuli.xyz avatar

192.168.68.210 is my adguard, it's on a different machine. It should be working, all my other devices use it and I can see the traffic going through it. My servers IP is 192.168.68.120, and I can't see traffic from that on my adguard at all. But it can ping my adguard.

PlexSheep ,

Okay, so if that's your actual DNS Server, can you confirm that it works? dig @yourdns debian.org, for example. Afterwards try to use the default DNS of your system dig debian.org. If both works, your DNS config should be fine. Try a curl debian.org -v too.

debian.org is just a random domain for this, use whatever you want. I don't see anything badly configured so far.

DreadPotato OP ,
@DreadPotato@sopuli.xyz avatar

as far as i can tell from the output, i think my DNS is working?

https://sopuli.xyz/pictrs/image/3eb10c81-e2c3-48c3-8202-a1cd9d98dc3b.webp
https://sopuli.xyz/pictrs/image/1ac4a434-f82a-4d81-807b-7bfae89b7d11.webp

  • All
  • Subscribed
  • Moderated
  • Favorites
  • •
  • random
  • selfhosted@lemmy.world
  • test
  • worldmews
  • mews
  • All magazines
    •