This error is show because not all iptables modules are loaded at the beginning and enabled in VE.conf.

Quick how-to can be found here ( http://kb.parallels.com/875 ) how to fix this. ( Please note to ignore the APF parts )

However this will still need to be done on the main node, there is nothing that you will need to do with the VPS container itself.