| Re: Firewall [message #51099 is a reply to message #51096] |
Mon, 03 February 2014 23:42  |
rcraig114
Messages: 3
Registered: February 2014
|
Junior Member |
|
|
OK, I've been able to figure out how to add individual rules. I just insert them at the bottom if need be or even in the beginning. My next problem is NAT. In order to conserve IP space, I created a container with a private IP address. The configuration for NAT is fairly straight forward,
iptables -t nat -A POSTROUTING -s 10.254.253.0/24 -o eth0 -j SNAT --to 63.141.X.X
iptables -A INPUT -s 10.254.253.0/24 -j ACCEPT
iptables -A FORWARD -d 10.254.253.0/24 -j ACCEPT
And it works just fine. However, I've tried a million different ways of integrating it into my above firewall config and it doesn't work. Anyone have any suggestions? Or does anyone have a different way of doing a firewall for the VZ host?
|
|
|
|
OpenVZ Forum
Members
Search
Help
Register
Login
Home
