vzctl.spec: fix iptables checking for RHEL5
Apparently, RHEL5 iptables does not support -S option, so
we have to use -L -n instead.
Also, any iptables state (not just RELATED,ESTABLISHED)
requires connection tracking.
Finally, some newer kernels/iptables have 'ctstate' not 'state'.
So, if any 'state' or SNAT/DNAT/MASQUERADE is used, we should
not try to disable VE0 connection tracking.
This is a fix to commits f17350f and 68440c5.
https://bugzilla.openvz.org/2755
Signed-off-by: Kir Kolyshkin <kir@openvz.org>
1 file changed