We have set up IPv6 networking on openvz using bridged veth devices. The IPv6 traffic to and from the VEs works fine.
ip6tables works on the HN and iptables work on the VE. Inside the VE we can set up ip6tables rules without any error messages. They are completely ignored however.
What additional configuration options are necessary for ip6tables to work?
ip6tables -I INPUT -j LOGand seeing if packets are actually hitting the filters. If they are, try adding similar lines throughout the filters (particularly after any expected drops) and see what gets logged to syslog. – Andy Smith Nov 30 '11 at 21:45