iptables -t nat -A PREROUTING -p tcp -m tcp -d 192.168.2.1/32 --dport 3389 -j DNAT --to-destination 192.168.5.2:3389
iptables v1.4.7: can't initialize iptables table `nat': Table does not exist (do you need to insmod?)
Perhaps iptables or your kernel needs to be upgraded.
The above is often because you don't have the correct modules loaded on the hostnode or enabled for the container but in some cases it's actually a weird openvz setting.
Check the following to see if it's an Openvz issue:
cat /sys/module/nf_conntrack/parameters/ip_conntrack_disable_ve0
1
If your result is a 1 then you need to do the following to solve it:
vi /etc/modprobe.d/openvz.conf
change :
options nf_conntrack ip_conntrack_disable_ve0=1
to:
options nf_conntrack ip_conntrack_disable_ve0=0
openvz, iptables, initialize, nat, insmod, kernel, upgraded, solutioniptables, prerouting, tcp, dport, dnat, destination, modules, hostnode, enabled, container, sys, module, nf_conntrack, parameters, ip_conntrack_disable_ve, vi, etc, modprobe, conf,