I'm not surprised the kernel version is outdated - I will look into upgrading it once I figure out what the problem is with this.
in these examples XXX.XXX.XXX.130 is the VE
XXX.XXX.XXX.94 is the HN
From HN:
ip a l
2: lo: <LOOPBACK,UP> mtu 16436 qdisc noqueue
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 scope host lo
inet6 ::1/128 scope host
valid_lft forever preferred_lft forever
4: sit0: <NOARP> mtu 1480 qdisc noop
link/sit 0.0.0.0 brd 0.0.0.0
6: eth3: <BROADCAST,MULTICAST,UP> mtu 1500 qdisc pfifo_fast qlen 1000
link/ether 00:18:f3:b6:35:09 brd ff:ff:ff:ff:ff:ff
inet XXX.XXX.XXX.94/26 brd XXX.XXX.XXX.255 scope global eth3
inet XXX.XXX.XXX.131/26 brd XXX.XXX.XXX.255 scope global eth3:0
inet6 fe80::218:f3ff:feb6:3509/64 scope link
valid_lft forever preferred_lft forever
8: eth1: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc pfifo_fast qlen 1000
link/ether 00:18:f3:b6:25:05 brd ff:ff:ff:ff:ff:ff
1: venet0: <BROADCAST,POINTOPOINT,NOARP,UP> mtu 1500 qdisc noqueue
link/void
XXX.XXX.XXX.130 dev venet0 scope link
XXX.XXX.XXX.64/26 dev eth3 proto kernel scope link src XXX.XXX.XXX.94
XXX.XXX.XXX.128/26 dev eth3 proto kernel scope link src XXX.XXX.XXX.131
default via XXX.XXX.XXX.65 dev eth3 src XXX.XXX.XXX.131
default via XXX.XXX.XXX.65 dev eth3
arp -n
Address HWtype HWaddress Flags Mask Iface
XXX.XXX.XXX.65 ether 00:04:23:AA:FF:DB C eth3
iptables -L
Chain INPUT (policy ACCEPT)
target prot opt source destination
Chain FORWARD (policy ACCEPT)
target prot opt source destination
Chain OUTPUT (policy ACCEPT)
target prot opt source destination
From VE:
ip a l
1: lo: <LOOPBACK,UP> mtu 16436 qdisc noqueue
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 scope host lo
inet6 ::1/128 scope host
valid_lft forever preferred_lft forever
3: venet0: <BROADCAST,POINTOPOINT,NOARP,UP> mtu 1500 qdisc noqueue
link/void
inet 127.0.0.1/32 scope host venet0
inet XXX.XXX.XXX.130/32 scope global venet0:0
ip r l
192.0.2.1 dev venet0 scope link
default via 192.0.2.1 dev venet0
iptables -L
Chain INPUT (policy ACCEPT)
target prot opt source destination
Chain FORWARD (policy ACCEPT)
target prot opt source destination
Chain OUTPUT (policy ACCEPT)
target prot opt source destination
I may be able to check the tcpdump results a little bit later, but in the meantime maybe someone can spot a problem with some of those results. Thanks!