[Users] Re: Will I be able to use MASQUERADE in iptables?
suno.ano at sunoano.org
Sat May 1 06:58:52 EDT 2010
Mike> Hi everyone. I found some threads in OpenVZ's forum about
Mike> MASQUERADE in iptables that said it's not yet supported. Can
Mike> someone conform this?
It works but you can use the SNAT target instead which is the preferred
way to map addresses because is creates less overhead.
The MASQUERADE target is mostly only used with dynamically assigned IP
connections i.e. when we do not know the actual IP address upfront (read
DHCP). If you have a static IP address, then you should use the SNAT
target which works perfectly fine with OpenVZ.
More information about the Users