3 servers using jails

From: Steve Bertrand (iaccounts_at_ibctech.ca)
Date: 06/18/04

  • Next message: Patrick Useldinger: "any use to build from source?"
    Date: Fri, 18 Jun 2004 14:38:09 -0400 (EDT)
    To: freebsd-questions@freebsd.org
    
    

    Hi all,

    I've got 3 devices that I would like to consolodate.

    Box A - IPFW/Nat gateway for corporate use.
    Box B - Squid/Dansguardian content filter (my use)
    Box C - Qmail/vpopmail (multiple domain) mailhub

    All three boxes are at separate locations.

    What I would like to do is implement a system (at the company Box A is at)
    that can house all three servers in one box. This is what I'd like to
    achieve:

    - Route/filter packets from corporate LAN to Internet
    - Continue to use the content filter/proxy for my family
    - Forward corporate LAN http traffic through the proxy
    - Continue to use the mailhub for everyone that is using it now

    I am curious to know if this can be jailed. 2 jails plus the main system,
    one with each virtual server mentioned above. If I can, will this be
    possible:

    - 1 public IP serving each server
    - ability to ipfw fwd all http traffic from the corporate LAN over to the
    virtual server running the proxy (on it's own public IP), as to deny
    certain web traffic
    - ability to use the proxy (again, with it's own public IP) from my house
    - have the mailhub on it's own public IP in it's own jail (or within the
    main system itself)
    - be able to use IPFW to control access, filter traffic for all jails by
    using each interfaces IP address as if there was no jails

    I hope I have been clear and consice. Please advise if further
    clarification is neccesary, and thanks in advance for any advice.

    ~sb

    _______________________________________________
    freebsd-questions@freebsd.org mailing list
    http://lists.freebsd.org/mailman/listinfo/freebsd-questions
    To unsubscribe, send any mail to "freebsd-questions-unsubscribe@freebsd.org"


  • Next message: Patrick Useldinger: "any use to build from source?"

    Relevant Pages

    • Re: Spam Filtering HELP
      ... The best way to block IP's is at the SMTP virtual server. ... > Filter under Message Delivery to block messages based on IP address. ... > the specific SMTP virtual server IP address assignments as they are not ...
      (microsoft.public.exchange.setup)
    • Re: Spam Filtering HELP
      ... The best way to block IP's is at the SMTP virtual server. ... > Filter under Message Delivery to block messages based on IP address. ... > the specific SMTP virtual server IP address assignments as they are not ...
      (microsoft.public.exchange.admin)
    • Re: How to filter email
      ... i forgot to apply the filter to SMTP Virtual server. ... >>i add email in Message Delivery | Properties | recipient filter ...
      (microsoft.public.exchange.setup)
    • Re: Idea about skeleton jail -- desirable jail features
      ... FreeBSD is currently behind in virtual server ... It does not support multiple IPs in jails. ...
      (freebsd-hackers)