Above information is outdated, to enable iptables you need to make sure that CT.conf(CT - id of your container, 100 for example) contains following line: <pre>NETFILTER="full" line. </pre> When this done, you should reboot your container and iptables should work properly.