<html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"></head><body dir="auto"><div>Hello Dan,</div><div><br></div><div>Not sure it will help. But below is my notes on how I do it on Ubuntu 12.04 and use a bridge interface for my containers. </div><div><br></div><div><span style="font-family: '.HelveticaNeueUI'; font-size: 15px; line-height: 19px; white-space: nowrap; -webkit-tap-highlight-color: rgba(26, 26, 26, 0.296875); -webkit-composition-fill-color: rgba(175, 192, 227, 0.230469); -webkit-composition-frame-color: rgba(77, 128, 180, 0.230469); -webkit-text-size-adjust: none; "><a href="http://heimic.net/2013/08/07/ubuntu-12-04-2-lts-and-lxc-continued/">http://heimic.net/2013/08/07/ubuntu-12-04-2-lts-and-lxc-continued/</a></span></div><div><span style="font-family: '.HelveticaNeueUI'; font-size: 15px; line-height: 19px; white-space: nowrap; -webkit-tap-highlight-color: rgba(26, 26, 26, 0.296875); -webkit-composition-fill-color: rgba(175, 192, 227, 0.230469); -webkit-composition-frame-color: rgba(77, 128, 180, 0.230469); -webkit-text-size-adjust: none; "><br></span></div><div><span style="font-family: '.HelveticaNeueUI'; font-size: 15px; line-height: 19px; white-space: nowrap; -webkit-tap-highlight-color: rgba(26, 26, 26, 0.296875); -webkit-composition-fill-color: rgba(175, 192, 227, 0.230469); -webkit-composition-frame-color: rgba(77, 128, 180, 0.230469); -webkit-text-size-adjust: none; ">Thanks</span></div><div><br>On 13/08/2013, at 3:07 PM, Dan Kegel <<a href="mailto:dank@kegel.com">dank@kegel.com</a>> wrote:<br><br></div><blockquote type="cite"><div><span>On Sat, Aug 3, 2013 at 6:46 PM, Tony Su <<a href="mailto:tonysu@su-networking.com">tonysu@su-networking.com</a>> wrote:</span><br><blockquote type="cite"><span>To be visible to outside the LAN does not require a second physical NIC,</span><br></blockquote><blockquote type="cite"><span>there are a number of ways to do that binding to a single NIC.</span><br></blockquote><blockquote type="cite"><span></span><br></blockquote><blockquote type="cite"><span>The OP needs to post a more detailed description of his topology.</span><br></blockquote><span></span><br><span>I have a plain old Linux box behind a plain old cable modem and consumer router.</span><br><span></span><br><span>Here's what I did:</span><br><span></span><br><span>0) installed ubuntu 13.04</span><br><span></span><br><span>1) Created a container, set it to autostart, and manually started it:</span><br><span> sudo lxc-create -t ubuntu -n minecraft</span><br><span> sudo ln -s /var/lib/lxc/minecraft/config /etc/lxc/auto/minecraft.conf</span><br><span> sudo lxc-start -n minecraft</span><br><span></span><br><span>2) Inside the container, installed a commandline minecraft server per</span><br><span><a href="http://www.minecraftwiki.net/wiki/Tutorials/Setting_up_a_server">http://www.minecraftwiki.net/wiki/Tutorials/Setting_up_a_server</a></span><br><span>i.e.</span><br><span>$ wget <a href="https://s3.amazonaws.com/Minecraft.Download/versions/1.6.2/minecraft_server.1.6.2.jar">https://s3.amazonaws.com/Minecraft.Download/versions/1.6.2/minecraft_server.1.6.2.jar</a></span><br><span></span><br><span>3) Inside the container, added a trivial upstart script per</span><br><span><a href="http://www.minecraftwiki.net/wiki/Tutorials/Ubuntu_startup_script">http://www.minecraftwiki.net/wiki/Tutorials/Ubuntu_startup_script</a></span><br><span>and started it by hand with</span><br><span>sudo initctl start minecraft-server</span><br><span></span><br><span>4) inside the container, 'netstat -lt' showed the darn thing listened</span><br><span>on ipv6, not ipv4, which wasn't very helpful,</span><br><span>so I forced the outer system to ipv4 only by adding ipv6.disable=1 to</span><br><span>the kernel</span><br><span>commandline in /etc/default/grub per</span><br><span><a href="http://www.upubuntu.com/2011/05/how-to-disable-ipv6-under-ubuntu.html">http://www.upubuntu.com/2011/05/how-to-disable-ipv6-under-ubuntu.html</a></span><br><span>(I know, ipv6 is vital, but I'm impatient, and I doubt my ISP supports it)</span><br><span>Rebooted outer system, then started inner system again, and inside it,</span><br><span>verified that 'netstat -ltn' showed server listening on ipv4 tcp port</span><br><span>0.0.0.0:25565.</span><br><span></span><br><span>5) NOW paid attention to Serge's reply. Googling on it a bit found</span><br><span><a href="http://www.servercobra.com/ubuntu-lxc-port-forwarding.html">http://www.servercobra.com/ubuntu-lxc-port-forwarding.html</a></span><br><span>which suggested doing something vaguely like</span><br><span></span><br><span>OUTERIP=192.168.AAA.BBB</span><br><span>INNERIP=10.0.CCC.DDD</span><br><span>sudo iptables -t nat -I PREROUTING -p tcp -d ${OUTERIP} --dport 25565</span><br><span>-j DNAT --to ${INNERIP}:25565</span><br><span>sudo iptables -A FORWARD -p tcp -d ${INNERIP} --dport 25565 -j ACCEPT</span><br><span></span><br><span>outside the container, where OUTERIP is the real machine's main LAN IP address,</span><br><span>and INNERIP is the container's IP address as seen from inside the container</span><br><span>(though maybe I got that wrong).</span><br><span></span><br><span>And here is where I get stuck. Although inside the container I can do</span><br><span> telnet localhost 25565</span><br><span>or</span><br><span> telnet 10.0.3.247 25565</span><br><span>and connect to the minecraft server, doing</span><br><span> telnet localhost 25565</span><br><span>or</span><br><span> telnet 192.168.AAA.BBB 25565</span><br><span>outside the container (where 192.168.AAA.BBB is my LAN ip addr)</span><br><span>doesn't let me connect</span><br><span>from the outer machine.</span><br><span></span><br><span>So here I am again, absolute beginner (having successfully ignored</span><br><span>learning about</span><br><span>iptables for longer than some people have been alive). Can I buy a clue?</span><br><span></span><br><span>Thanks!</span><br><span>- Dan</span><br><span></span><br><span>------------------------------------------------------------------------------</span><br><span>Get 100% visibility into Java/.NET code with AppDynamics Lite!</span><br><span>It's a free troubleshooting tool designed for production.</span><br><span>Get down to code-level detail for bottlenecks, with <2% overhead. </span><br><span>Download for free and get started troubleshooting in minutes. </span><br><span><a href="http://pubads.g.doubleclick.net/gampad/clk?id=48897031&iu=/4140/ostg.clktrk">http://pubads.g.doubleclick.net/gampad/clk?id=48897031&iu=/4140/ostg.clktrk</a></span><br><span>_______________________________________________</span><br><span>Lxc-users mailing list</span><br><span><a href="mailto:Lxc-users@lists.sourceforge.net">Lxc-users@lists.sourceforge.net</a></span><br><span><a href="https://lists.sourceforge.net/lists/listinfo/lxc-users">https://lists.sourceforge.net/lists/listinfo/lxc-users</a></span><br></div></blockquote></body></html>