[Users] Re: Will I be able to use MASQUERADE in iptables?

Suno Ano suno.ano at sunoano.org
Sat May 1 06:58:52 EDT 2010

 Mike> Hi everyone. I found some threads in OpenVZ's forum about
 Mike> MASQUERADE in iptables that said it's not yet supported. Can
 Mike> someone conform this?

It works but you can use the SNAT target instead which is the preferred
way to map addresses because is creates less overhead.

The MASQUERADE target is mostly only used with dynamically assigned IP
connections i.e. when we do not know the actual IP address upfront (read
DHCP). If you have a static IP address, then you should use the SNAT
target which works perfectly fine with OpenVZ.

More information about the Users mailing list