Open Stack

Hi,

I have a control node running nova-network using FlatDHCPManager and a
compute node only running nova-compute. It's a single nic setup. I can
start VM's on the compute node and ssh/ping them from the control node.
I can also ping from vm to control node bridge ip and em1 device ip.
However, I cannot ping from the VM to outside internet ( although DNS
apparently works). I set em1 on both to promisc and have ip-forwarding
on. iptables seem to have the right entries. Any ideas?

here's conf, iptables, etc:

http://paste.openstack.org/show/21159/

thx