<p>thx. </p>
<p><blockquote type="cite">ÔÚ 2010-5-1 ÏÂÎç7:02£¬"Suno Ano" <<a href="mailto:suno.ano@sunoano.org">suno.ano@sunoano.org</a>>±àд£º<br><br><br>
Mike> Hi everyone. I found some threads in OpenVZ's forum about<br>
Mike> MASQUERADE in iptables that said it's not yet supported. Can<br>
Mike> someone conform this?<br>
<br>
It works but you can use the SNAT target instead which is the preferred<br>
way to map addresses because is creates less overhead.<br>
<br>
The MASQUERADE target is mostly only used with dynamically assigned IP<br>
connections i.e. when we do not know the actual IP address upfront (read<br>
DHCP). If you have a static IP address, then you should use the SNAT<br>
target which works perfectly fine with OpenVZ.<br>
<br>
<br>
_______________________________________________<br>
Users mailing list<br>
<a href="mailto:Users@openvz.org">Users@openvz.org</a><br>
<a href="https://openvz.org/mailman/listinfo/users" target="_blank">https://openvz.org/mailman/listinfo/users</a><br>
</blockquote></p>