Parallels Virtualization and Automation Software

Iptables NAT module does not work in CT.

SYMPTOMS

NAT module does not work in CT, you get "can't initialize iptables table 'nat'" error:

# iptables  -t nat  -L -n
iptables v1.2.11: can't initialize iptables table `nat': Table does not exist (do you need to insmod?)
Perhaps iptables or your kernel needs to be upgraded.

The following Iptables modules settings are configured on the hardware node:

# cat /proc/net/ip_tables_targets
LOG
TOS
TCPMSS
REJECT
ERROR
# grep con /etc/modprobe.conf
options ip_conntrack ip_conntrack_disable_ve0=1

RESOLUTION

If order to enable NAT you should perform the following actions on the hardware node:

- stop Virtuozzo service and all CTs:

- reconfigure IPtables module "ip_conntrack":

- restart IPtables service:
 
- start Vituozzo service and all CTs: