Article ID: 6816, created on Oct 26, 2009, last review on Jun 17, 2016

  • Applies to:
  • Virtuozzo 6.0
  • Virtuozzo containers for Linux


Sometimes, when running an iptables command inside a Container, one of following errors occurs:

32-bit Container:

# /sbin/iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
iptables: Unknown error 4294967295

64-bit Container:

# /sbin/iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
iptables: Unknown error 18446744073709551615


The most likely cause is that not all required iptables modules are enabled for the Container.

The error may also occur when trying to use an iptables module which is not virtualized for Containers (e.g., MASQUERADE):

// inside a Container:
# iptables -t nat -A POSTROUTING -s -o venet0 -j MASQUERADE
iptables: Unknown error 4294967295


Please try to adjust iptables configuration as described in this KB article regarding IPtables configuration.

For the second scenario, remember that the MASQUERADE option cannot be used because masquerading is not virtualized as a module. However, you may use SNAT instead. You can check for supported and active iptables modules that you can use inside of a Container in the file /proc/net/ip_tables_targets, e.g.:

[root@HWN ~]# vzctl exec 101 cat /proc/net/ip_tables_targets
[root@HWN ~]#

Search Words

networking vzmigrate

Unknown error 18446744073709551615

Unknown error 4294967295


network doesnt work after migration

no network

d02f9caf3e11b191a38179103495106f e8e50b42231236b82df27684e7ec0beb 2897d76d56d2010f4e3a28f864d69223 0dd5b9380c7d4884d77587f3eb0fa8ef c62e8726973f80975db0531f1ed5c6a2

Email subscription for changes to this article
Save as PDF