Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 17 Oct 2023 11:02:53 -0400
From:      Paul Procacci <pprocacci@gmail.com>
To:        Odhiambo Washington <odhiambo@gmail.com>
Cc:        freebsd-virtualization@freebsd.org
Subject:   Re: Running a webserver inside a bhyve host and exposing it to the world via PF
Message-ID:  <CAFbbPuiRLC0F93JMybdk2sFzJ2X_o5JqkQo3trd91LoZeusXqA@mail.gmail.com>
In-Reply-To: <CAAdA2WNzTb6Fvk=Z%2BtAx376mBRztgxY_M75aXBzDFN1bb9yOuQ@mail.gmail.com>
References:  <CAAdA2WNzTb6Fvk=Z%2BtAx376mBRztgxY_M75aXBzDFN1bb9yOuQ@mail.gmail.com>

next in thread | previous in thread | raw e-mail | index | archive | help

[-- Attachment #1 --]
On Tue, Oct 17, 2023 at 10:01 AM Odhiambo Washington <odhiambo@gmail.com>
wrote:

> I am stuck on how I can achieve this.
> I have a Linux VM running under bhyve. I have installed a webserver
> running on port 80 that I'd like to expose to the outside world.
> I am unable to figure out how to achieve this with PF running on the host
> machine.
>
> 1. I am able to access my VM using VNC Viewer
> 2. My VM is able to access the Internet
> 3. I am NOT able to ping my VM from the host
> 4. I am unable to SSH into the VM from the host.
>
> My hunch tells me it's about my PF.conf, but is there a guide somewhere on
> achieving the above?
>
>
> --
> Best regards,
> Odhiambo WASHINGTON,
> Nairobi,KE
> +254 7 3200 0004/+254 7 2274 3223
> "Oh, the cruft.", egrep -v '^$|^.*#' ¯\_(ツ)_/¯ :-)
> [How to ask smart questions:
> http://www.catb.org/~esr/faqs/smart-questions.html]
>

Care to share what you tried with your PF.conf?

It should be something as simple as:
rdr on <interface> proto tcp from <source host> to <physical host> port
<physical port> -> <internal host> port <internal port>

~Paul
-- 
__________________

:(){ :|:& };:

[-- Attachment #2 --]
<div dir="ltr"><div><div dir="ltr"><br></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Tue, Oct 17, 2023 at 10:01 AM Odhiambo Washington &lt;<a href="mailto:odhiambo@gmail.com">odhiambo@gmail.com</a>&gt; wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir="ltr">I am stuck on how I can achieve this.<div>I have a Linux VM running under bhyve. I have installed a webserver running on port 80 that I&#39;d like to expose to the outside world.</div><div>I am unable to figure out how to achieve this with PF running on the host machine.</div><div><br></div><div>1. I am able to access my VM using VNC Viewer</div><div>2. My VM is able to access the Internet</div><div>3. I am NOT able to ping my VM from the host</div><div>4. I am unable to SSH into the VM from the host. </div><div><br></div><div>My hunch tells me it&#39;s about my PF.conf, but is there a guide somewhere on achieving the above?</div><div><br clear="all"><div><br></div><span class="gmail_signature_prefix">-- </span><br><div dir="ltr" class="gmail_signature"><div dir="ltr"><div dir="ltr"><div>Best regards,<br>Odhiambo WASHINGTON,<br>Nairobi,KE<br>+254 7 3200 0004/+254 7 2274 3223<br>&quot;<span style="font-size:12.8px">Oh, the cruft.</span><span style="font-size:12.8px">&quot;, </span><span style="font-size:12.8px">egrep -v &#39;^$|^.*#&#39; </span><span style="background-color:rgb(34,34,34);color:rgb(238,238,238);font-family:&quot;Lucida Console&quot;,Consolas,&quot;Courier New&quot;,monospace;font-size:13.6px">¯\_(ツ)_/¯</span><span style="font-size:12.8px"> :-)</span></div><div><span style="font-size:12.8px">[How to ask smart questions: </span><span style="font-size:12.8px"><a href="http://www.catb.org/~esr/faqs/smart-questions.html" target="_blank">http://www.catb.org/~esr/faqs/smart-questions.html</a>]</span></div></div></div></div></div></div>;
</blockquote></div><br clear="all"></div><div>Care to share what you tried with your PF.conf?</div><div><br>It should be something as simple as:<br>rdr on &lt;interface&gt; proto tcp from &lt;source host&gt; to &lt;physical host&gt; port &lt;physical port&gt; -&gt; &lt;internal host&gt; port &lt;internal port&gt;<br><br></div><div>~Paul</div><div><span class="gmail_signature_prefix">-- </span><br><div dir="ltr" class="gmail_signature">__________________<br><br>:(){ :|:&amp; };:</div></div></div>

Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?CAFbbPuiRLC0F93JMybdk2sFzJ2X_o5JqkQo3trd91LoZeusXqA>