New answers tagged


The MASQUERADE rule happens at POSTROUTING: that is after a routing decision was already made and a destination interface was already chosen. To communicate with outside, the host will use via eno1. So the MASQUERADE rule criteria should be when using the output interface eno1 rather than br0vm. You should thus have used: iptables -t nat -A ...


In the end I just installed a TinyCore Virtual Machine on the NAS which can handle the NAT. It seems a bit unnecessary, but I guess it's a little more controllable... so it works.


It seems like configuration files are messed up for newer debian versions so I needed to create a new configuration for Debian 8 in /etc/vz/dists and it works jsut fine after that.

Top 50 recent answers are included