Re: jails, cron and sendmail

The default configuration doesn't expose sendmail to the publicly
visible IP addres. The daemon it runs only listens for connections to
the localhost address.
Which is rewritten to the jails (externally visible) address on a connect()
Yup. I wasn't aware of that strange behavior of jails. That should be
fixed.
Fixed how? Disallow jailed applications to connect to 127.0.0.1,
and thus break most of them, or have them reach 127.0.0.1 on the
host system and weaken the security?

Would it be too much to ask to let the system keep lo0, and give the first jail lo1, the second jail lo2...? That is, a separate loopback for each jail?
_______________________________________________
freebsd-hackers@xxxxxxxxxxx mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-hackers
To unsubscribe, send any mail to "freebsd-hackers-unsubscribe@xxxxxxxxxxx"

Relevant Pages

  • Re: strange pw behaviour
    ... Did you add the users/groups to the jail, ... that the group file you added this to is the same group file that is being ... For example, if you have a user "wmoran" with uid 1501 in the host system, ... it seems smarter to keep jailed filesystems completely ...
    (freebsd-questions)
  • Re: freebsd jail: web and database server config questions
    ... and database server. ... therefore running the webserver in the jailed environment seems better to ... tcp/ip to the database server running on the host system? ... basically that means I would need to create a new jail everytime I recompile ...
    (freebsd-questions)
  • RE: Managing updates in jails
    ... after having mount_nullfs'd /usr/ports from the host system ... Subject: Managing updates in jails ... I'm a recent convert to FreeBSD, mainly because of the jail ... then repeating the process inside the template jail. ...
    (freebsd-questions)
  • Re: strange pw behaviour
    ... For example, on one of my jail systems, I have ... I'm using pw from the host system, ... All group names are displayed right, according to the entries ... resulted in 7 directories showing and only 3 showing Permission denied. ...
    (freebsd-questions)
  • Re: HEADSUP: Filesystem rototiling over
    ... the host system: let's say we have a jail called "named". ... The following patch nullifies the previous one, ... When the first one is made true, then rc.d/jail will mount (resp. ...
    (freebsd-current)