Symptom:
some iptables function that relate with connection tracking module aren't functional after you install virtuozzo.
Example: -m state --state ESTABLISHED,RELATED
Cause:
kernel module named ip_conntrack is disabled by default on hardware node or container 0 (ve0).
Resolution:
Enable ip_conntrack for ve0 by add following line to /etc/modprobe.conf file.
options ip_conntrack ip_conntrack_enable_ve0=1
and if you see these following line in the file
options ip_conntrack ip_conntrack_disable_ve0=1
then change the parameter to 0 as following.
options ip_conntrack ip_conntrack_disable_ve0=0
