Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Ok, so here is the set up:

I've got fedora 14 running inside latest virtualbox with nat and networking is working. Inside this fedora I have installed openvz from the rhel6 repository and have setup a Suse 11.1 x86 VE. I'm using venet device and have also set up the following iptables rules:

iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE

From the VE I can ping the hardware node, but I can't get past the hw node. Ping from VE return "icmp host unreachable" and by sniffing venet0:0 with tcpdump I can see traffic coming from the VE.

Am I missing something?

share|improve this question
Are you sure it's eth0? – Aleksandr Levchuk Apr 10 '11 at 9:47
Fixed it, turned out that fedora had some default rule which was dropping everything in the FORWARD chain. – LordDoskias Apr 10 '11 at 16:45

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.