I was stumbling a lot with the configuration where allowing access to a service from outside, because I assumed that after adding the iptables DNAT rule, I could test the rule from the hardware node. The rule only works for packets send from outside.

[[User:Shaplov|Shaplov]] 10:27, 23 June 2007 (EDT)

"Usually you supply public IP addresses to your containers"? How? [[User:Guaka|Guaka]] 14:03, 8 April 2009 (UTC)

: Well, by running <code>vzctl set $CTID --ipadd a.b.c.d --save</code> command --[[User:Kir|Kir]] 14:06, 8 April 2009 (UTC)