some iptables functions don't work after install virtuozzo

Symptom:

some iptables function that relate with connection tracking module aren't functional after you install virtuozzo.

Example: -m state --state ESTABLISHED,RELATED

Cause:

kernel module named ip_conntrack is disabled by default on hardware node or container 0 (ve0).

Resolution:

Enable ip_conntrack for ve0 by add following line to /etc/modprobe.conf file.

options ip_conntrack ip_conntrack_enable_ve0=1

and if you see these following line in the file

options ip_conntrack ip_conntrack_disable_ve0=1

then change the parameter to 0 as following.

options ip_conntrack ip_conntrack_disable_ve0=0