From 47f009972f2c48571f5818a72734f7d4bec1f24a Mon Sep 17 00:00:00 2001
From: teastep <teastep@fbd18981-670d-0410-9b5c-8dc0c1a9a2bb>
Date: Fri, 31 Aug 2007 22:52:19 +0000
Subject: [PATCH] Add a FAQ about OpenVZ

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@7261 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
---
 docs/FAQ.xml | 14 +++++++++++++-
 1 file changed, 13 insertions(+), 1 deletion(-)

diff --git a/docs/FAQ.xml b/docs/FAQ.xml
index 63d3605ef..c6392bacd 100644
--- a/docs/FAQ.xml
+++ b/docs/FAQ.xml
@@ -1750,6 +1750,18 @@ iptables: Invalid argument
       server(s) as <emphasis role="bold">critical</emphasis> in <ulink
       url="manpages/shorewall-routestopped.html">/etc/shorewall/routestopped</ulink>.</para>
     </section>
+
+    <section id="faq68">
+      <title>(FAQ 68) I have a VM under a OpenVZ system. I can't get rid of
+      the following message:</title>
+
+      <para>ERROR: Command "/sbin/iptables -A FORWARD -m state --state
+      ESTABLISHED,RELATED -j ACCEPT"</para>
+
+      <para><emphasis role="bold">Answer</emphasis>: At a root shell prompt,
+      type the iptables command shown in the error message. If the command
+      fails, you OpenVZ Netfilter/iptables configuration is incorrect. </para>
+    </section>
   </section>
 
   <section id="MultiISP">
@@ -2129,7 +2141,7 @@ eth0               eth1                        # eth1 = interface to local netwo
 
       <para><emphasis role="bold">Answer</emphasis>: Beginning with version
       3.2.3, there are no compatibility constraints between Shorewall and
-      Shorewall-lite. </para>
+      Shorewall-lite.</para>
     </section>
   </section>