Вывод правил на HN
[root@host-46-129 etc]# iptables -t nat -L && iptables -t filter -L && iptables -t mangle -L
Chain PREROUTING (policy ACCEPT)
target prot opt source destination
Chain POSTROUTING (policy ACCEPT)
target prot opt source destination
Chain OUTPUT (policy ACCEPT)
target prot opt source destination
Chain INPUT (policy ACCEPT)
target prot opt source destination
RH-Firewall-1-INPUT all -- anywhere anywhere
Chain FORWARD (policy ACCEPT)
target prot opt source destination
RH-Firewall-1-INPUT all -- anywhere anywhere
Chain OUTPUT (policy ACCEPT)
target prot opt source destination
Chain RH-Firewall-1-INPUT (2 references)
target prot opt source destination
ACCEPT all -- anywhere anywhere
ACCEPT icmp -- anywhere anywhere icmp any
ACCEPT esp -- anywhere anywhere
ACCEPT ah -- anywhere anywhere
ACCEPT udp -- anywhere 224.0.0.251 udp dpt:mdns
ACCEPT udp -- anywhere anywhere udp dpt:ipp
ACCEPT tcp -- anywhere anywhere tcp dpt:ipp
ACCEPT all -- anywhere anywhere state RELATED,ESTABLISHED
ACCEPT tcp -- anywhere anywhere state NEW tcp dpt:ssh
ACCEPT tcp -- anywhere anywhere state NEW tcp dpt:smtp
REJECT all -- anywhere anywhere reject-with icmp-host-prohibited
Chain PREROUTING (policy ACCEPT)
target prot opt source destination
Chain INPUT (policy ACCEPT)
target prot opt source destination
Chain FORWARD (policy ACCEPT)
target prot opt source destination
Chain OUTPUT (policy ACCEPT)
target prot opt source destination
Chain POSTROUTING (policy ACCEPT)
target prot opt source destination
[root@host-46-129 etc]#
И вывод на VE
[root@host-46-130 /]# iptables -t nat -L && iptables -t filter -L && iptables -t mangle -L
iptables v1.3.5: can't initialize iptables table `nat': Table does not exist (do you need to insmod?)
Perhaps iptables or your kernel needs to be upgraded.
[root@host-46-130 /]#
По поводу других DNS
[root@host-46-129 vz]# vzctl set 46130 --nameserver 4.2.2.1 --save
File resolv.conf was modified
Saved parameters for CT 46130
[root@host-46-129 vz]# vzctl stop 46130
Stopping container ...
Container was stopped
Container is unmounted
[root@host-46-129 vz]# vzctl start 46130
Starting container ...
Container is mounted
Adding IP address(es): 213.248.46.130
Setting CPU units: 1000
Configure meminfo: 65536
Set hostname: host-46-130.ru-point.com
File resolv.conf was modified
Container start in progress...
[root@host-46-129 vz]# vzctl enter 46130
entered into CT 46130
[root@host-46-130 /]# ping mail.ru
ping: unknown host mail.ru
[root@host-46-130 /]# cat /etc/resolv.conf
nameserver 4.2.2.1
[root@host-46-130 /]#