Re: jail addresses and default bindings
- From: "Bjoern A. Zeeb" <bzeeb-lists@xxxxxxxxxxxxxxxxxx>
- Date: Sat, 16 Dec 2006 10:13:00 +0000 (UTC)
On Sat, 16 Dec 2006, Gergely CZUCZY wrote:
Hi,
whenever i try to connect to a port of a jail from the
host system, the kernel automaticly assigns the
jail's IP address as the source address to the socket.
I'd assume that this is not a so welcomed behaviour, because
it is because that's the way it always works with inet socket
communitcation. Connect to the looback address and the source address
will be the looback address; connect to any of the other "host
addresses" and the source will be the same address (unless told
to be a different one; see further down).
this way it's hard to distingvish in a packet filter(let's say pf),
among connections originating from within the jail itself or
from the host system to the jail.
I won't ask why you would want to do that if you control it
from the "host" system anyway...
my question is, are there any work in progress around this?
if it's going to be reviewed/fixed/etc, when will it going to
happen, and into which stable/release branch is it planned?
No if you want that make sure your connections comes from the
"host system" bind to the IP of the "host system" (or one of
them). telnet -s, BindAddress of ssh, ... are your friends.
--
Bjoern A. Zeeb bzeeb at Zabbadoz dot NeT
_______________________________________________
freebsd-net@xxxxxxxxxxx mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-net
To unsubscribe, send any mail to "freebsd-net-unsubscribe@xxxxxxxxxxx"
- Follow-Ups:
- Re: [fbsd] Re: jail addresses and default bindings
- From: Jeremie Le Hen
- Re: [fbsd] Re: jail addresses and default bindings
- References:
- jail addresses and default bindings
- From: Gergely CZUCZY
- jail addresses and default bindings
- Prev by Date: Re: Runtime control for the IPFIREWALL_FORWARD
- Next by Date: UDP lite for FreeBSD
- Previous by thread: jail addresses and default bindings
- Next by thread: Re: [fbsd] Re: jail addresses and default bindings
- Index(es):
Relevant Pages
|
|
