> adding iptables -t raw -A PREROUTING -d '10.2.0.100/32' -i vmbr14 -j CT --zone > 1 > ------------------------------------------------------------------------------- > now it's working > So, it seem that postrouting occur once by zone, or something like that
yes, looks like that. > So,I think using zones is the goodway. But not available in 2.6.32. > (maybe it can be easily backported ?) I thing 3.10 will be stable in a few months, so there is no need to do a backport. _______________________________________________ pve-devel mailing list pve-devel@pve.proxmox.com http://pve.proxmox.com/cgi-bin/mailman/listinfo/pve-devel
