I actually didn't quite recognize the `ip r g` as a command, d'uh.
Anyway:
# ip r g 85.a.b.c from 81.x.y.1 iif eth0
85.a.b.c from 81.x.y.1 dev venet0 src 81.x.y.z
cache <src-direct> mtu 1500 advmss 1460 hoplimit 64 iif eth0
In the guest VE, pings other than from VE0 are not seen (on venet0:0).
I'm using tcpdump to check this.
venet0 on VE0 doesn't have its own IP, what would I use to check the packet there?
`ip r g` inside VEnnn returns
# ip r g 85.a.b.c from 81.x.y.1 iif venet0:0
local 85.a.b.c from 81.x.y.1 dev lo src 85.a.b.c
cache <local,src-direct> iif venet0