diff -Nru source_amd64_openvz.orig/net/ipv6/netfilter/ip6_tables.c source_amd64_openvz/net/ipv6/netfilter/ip6_tables.c
--- source_amd64_openvz.orig/net/ipv6/netfilter/ip6_tables.c	2010-12-17 23:46:50.000000000 +0000
+++ source_amd64_openvz/net/ipv6/netfilter/ip6_tables.c	2010-12-17 23:52:30.000000000 +0000
@@ -2032,7 +2032,7 @@
 {
 	int ret;
 
-	if (!capable(CAP_NET_ADMIN))
+	if (!capable(CAP_NET_ADMIN) && !capable(CAP_VE_NET_ADMIN))
 		return -EPERM;
 
 	switch (cmd) {
@@ -2057,7 +2057,7 @@
 {
 	int ret;
 
-	if (!capable(CAP_NET_ADMIN))
+	if (!capable(CAP_NET_ADMIN) && !capable(CAP_VE_NET_ADMIN))
 		return -EPERM;
 
 	switch (cmd) {