[Users] Got V7 NAT for containers figured out... sorta

[Kir Kolyshkin]

On 01/27/2016 05:17 PM, Scott Dowdle wrote:
> Greetings,
>
> So following this wiki page:
> https://wiki.openvz.org/Using_NAT_for_container_with_private_IPs
>
> I noticed that /etc/modprobe.d/parallels.conf needed to be edited to change ip_conntrack_disable_ve0=1 to ip_conntrack_disable_ve0=0.
>
> Then my SNAT rule worked:
> /usr/sbin/iptables -t nat -A POSTROUTING -s 192.168.0.1/24 -o br0 -j SNAT --to {host-ip-address}
>
> I put that rule in /etc/rc.local and rebooted... but it doesn't seem to take affect unless manually run post boot.

I think systemd no longer runs /etc/rc.local.

Most probably you need to figure out firewalld configuration, as 
firewalld is used by RHEL/CentOS 7 by default.

Once you'll figure this out, you are very welcome to share the knowledge 
on wiki!

Kir.