openvz config iptables

gistfile1.txt

Edit /etc/sysconfig/iptables:

vi /etc/sysconfig/iptables
Find the following two lines:

:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
Add the following lines(marked in bold letters)  between the above two lines.

:FORWARD ACCEPT [0:0]
-P FORWARD ACCEPT
-F FORWARD
:OUTPUT ACCEPT [0:0]
Also, make sure the following has been commented out.

#-A FORWARD -j REJECT –reject-with icmp-host-prohibited
Save and close the file.

Then, Restart iptables service to take effect the saved changes.

service iptables restart