i'd like to connect to localhost:5432 (in an openvz container) and end up connected to postgres in another container. i'm presuming (HN) iptables magic is best. is that right? other better/worthwhile ways? favorite howto/howidid pointers? seems easy in concept, but twiddling iptables is a bit reminiscent of pandora.. tia, -g