Jan Tomasek wrote:
> I just realized that my VEs are is using IP address of HW node for
> connections initiated from inside of VE, except of their own. For example:

My fault! I just realized it was because:

modprobe ipt_MASQUERADE
iptables -F; iptables -t nat -F; iptables -t mangle -F
iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE
echo 1 > /proc/sys/net/ipv4/ip_forward

I added those directives to my FW startup script because of VE which is
using private IP range - it is supposed to have access to network but
should not be reachable on public IP (to save IP) because it provide no
services.

Sorry for meaningless mail on the list.

-- 
-----------------------
Jan Tomasek aka Semik
http://www.tomasek.cz/

Attachment: signature.asc
Description: OpenPGP digital signature

_______________________________________________
Users mailing list
[email protected]
https://openvz.org/mailman/listinfo/users

Reply via email to