vzctl.spec: fix iptables checking for RHEL5

Apparently, RHEL5 iptables does not support -S option, so
we have to use -L -n instead.

Also, any iptables state (not just RELATED,ESTABLISHED)
requires connection tracking.

Finally, some newer kernels/iptables have 'ctstate' not 'state'.

So, if any 'state' or SNAT/DNAT/MASQUERADE is used, we should
not try to disable VE0 connection tracking.

This is a fix to commits f17350f and 68440c5.

https://bugzilla.openvz.org/2755

Signed-off-by: Kir Kolyshkin <kir@openvz.org>
vzctl create: fix an error message

There was a space missing before the ve.conf file name.

Signed-off-by: Kir Kolyshkin <kir@openvz.org>
vzctl.spec: require recent RHEL6 kernel

Because of commit bb1956e vzctl can't be used on kernel older than
042stab078.22 as those kernels do not set unset UBCs to unlimited,
resulting in an inability to start a container.

We could potentially fix it by setting unset UBCs to unlimited only
on CT start. But as this kernel is rather old we'd better just require
a more recent kernel.

Due to the fact that vzctl also works on RHEL5 kernel, we use
"Conflicts:" rather than "Requires:".

https://bugzilla.openvz.org/3094

Reported-by: Avi Brender <abrender@elitehosts.com>
Signed-off-by: Kir Kolyshkin <kir@openvz.org>