Re: [fbsd] Re: jail addresses and default bindings

On Sat, Dec 16, 2006 at 10:13:00AM +0000, Bjoern A. Zeeb wrote:
this way it's hard to distingvish in a packet filter(let's say pf),
among connections originating from within the jail itself or
from the host system to the jail.

I won't ask why you would want to do that if you control it
from the "host" system anyway...

Additionally, ipfw(8) has the "jail" keyword, though it is easier to
work with IP addresses since jail ids are bumped whenever you restart
a jail.

Regards,
--
Jeremie Le Hen
< jeremie at le-hen dot org >< ttz at chchile dot org >
_______________________________________________
freebsd-net@xxxxxxxxxxx mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-net
To unsubscribe, send any mail to "freebsd-net-unsubscribe@xxxxxxxxxxx"

Relevant Pages

  • Re: strange pw behaviour
    ... Did you add the users/groups to the jail, ... that the group file you added this to is the same group file that is being ... For example, if you have a user "wmoran" with uid 1501 in the host system, ... it seems smarter to keep jailed filesystems completely ...
    (freebsd-questions)
  • Re: [fbsd] Re: jail addresses and default bindings
    ... from the host system to the jail. ... but in most client libraries i don't have this ...
    (freebsd-net)
  • RE: Managing updates in jails
    ... after having mount_nullfs'd /usr/ports from the host system ... Subject: Managing updates in jails ... I'm a recent convert to FreeBSD, mainly because of the jail ... then repeating the process inside the template jail. ...
    (freebsd-questions)
  • Re: strange pw behaviour
    ... For example, on one of my jail systems, I have ... I'm using pw from the host system, ... All group names are displayed right, according to the entries ... resulted in 7 directories showing and only 3 showing Permission denied. ...
    (freebsd-questions)
  • Re: HEADSUP: Filesystem rototiling over
    ... the host system: let's say we have a jail called "named". ... The following patch nullifies the previous one, ... When the first one is made true, then rc.d/jail will mount (resp. ...
    (freebsd-current)