I use NAT to move requests from external ports to an internal ip address and port hosted with proxmox.
Something like this:
iptables -t nat -A PREROUTING -i vmbr0 -p tcp --dport 8000 -j DNAT --to 10.0.0.1:80
However even when I try to temporarily block port 8000 the requests still go through and I can access the web pages.
Can you not block ports on the host machine when using NAT? Do I have to do this on the virtual machine? Is this just the wrong command?
ufw deny 8000