I'm running DelugeVPN on Unraid without issue at the moment. I'm trying to setup a second container on a PhotonOS docker host separately, different VLAN from Unraid. I'm having an issue accessing the Deluge WebUI while the VPN is enabled. This is when trying to load the WebUI from a different computer on a different VLAN. As soon as the VPN is set to no it will load fine. The same setup on Unraid, VPN on and a different VLAN loads fine.
This seems to be the same issue as Kantraz from this page here:
Their same solution of running "iptables -t nat -A POSTROUTING -j MASQUERADE" on the host resolves the issue. I understand very little about iptables and I'm assuming this is opening up more than is required. Is there a cut down version specific to this container that could be used instead? This is the output prior to running the above command:
iptables -L
Chain INPUT (policy DROP)
target prot opt source destination
ACCEPT all -- anywhere anywhere
ACCEPT all -- anywhere anywhere ctstate RELATED,ESTABLISHED
ACCEPT tcp -- anywhere anywhere tcp dpt:ssh
Chain FORWARD (policy DROP)
target prot opt source destination
DOCKER-USER all -- anywhere anywhere
DOCKER-ISOLATION-STAGE-1 all -- anywhere anywhere
ACCEPT all -- anywhere anywhere ctstate RELATED,ESTABLISHED
DOCKER all -- anywhere anywhere
ACCEPT all -- anywhere anywhere
ACCEPT all -- anywhere anywhere
ACCEPT all -- anywhere anywhere ctstate RELATED,ESTABLISHED
DOCKER all -- anywhere anywhere
ACCEPT all -- anywhere anywhere
ACCEPT all -- anywhere anywhere
ACCEPT all -- anywhere anywhere ctstate RELATED,ESTABLISHED
DOCKER all -- anywhere anywhere
ACCEPT all -- anywhere anywhere
ACCEPT all -- anywhere anywhere
Chain OUTPUT (policy DROP)
target prot opt source destination
ACCEPT all -- anywhere anywhere
Chain DOCKER (3 references)
target prot opt source destination
ACCEPT tcp -- anywhere 172.19.0.2 tcp dpt:9117
ACCEPT tcp -- anywhere 172.19.0.3 tcp dpt:58846
ACCEPT tcp -- anywhere 172.19.0.3 tcp dpt:privoxy
ACCEPT tcp -- anywhere 172.19.0.3 tcp dpt:8112
Chain DOCKER-ISOLATION-STAGE-1 (1 references)
target prot opt source destination
DOCKER-ISOLATION-STAGE-2 all -- anywhere anywhere
DOCKER-ISOLATION-STAGE-2 all -- anywhere anywhere
DOCKER-ISOLATION-STAGE-2 all -- anywhere anywhere
RETURN all -- anywhere anywhere
Chain DOCKER-ISOLATION-STAGE-2 (3 references)
target prot opt source destination
DROP all -- anywhere anywhere
DROP all -- anywhere anywhere
DROP all -- anywhere anywhere
RETURN all -- anywhere anywhere
Chain DOCKER-USER (1 references)
target prot opt source destination
RETURN all -- anywhere anywhere