Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 6 Jul 2014 14:28:23 +0000
From:      Mark Felder <feld@freebsd.org>
To:        marko@markoturk.info, freebsd-questions@freebsd.org
Subject:   Re: 10.0-RELEASE openvpn jail with ezjail
Message-ID:  <8718a7fe8a79f3341104e5811c0ceb14@mail.feld.me>
In-Reply-To: <20140706102642.GA13371@vps.markoturk.info>
References:  <20140706102642.GA13371@vps.markoturk.info>

next in thread | previous in thread | raw e-mail | index | archive | help
July 6 2014 5:36 AM, "Marko Turk"  wrote:=20

> Hi,
>=20
> I'm trying to create an OpenVPN jail on 10.0-RELEASE using tun device.

I have it working without issues. The only problem is that you cannot =
restart the daemon within the jail, you have to restart the jail.

host's /etc/rc.conf:

# needed for openvpn
gateway_enable=3D"YES"
cloned_interfaces=3D"tun0"

in my ezjail openvpn config:

export jail_openvpn_exec_prestart0=3D"ifconfig tun0 10.8.0.1 10.8.0.2 =
netmask 255.255.255.0"
export jail_openvpn_exec_prestart1=3D"route add -net 10.8.0.0/24 =
10.8.0.2"


That should get you pointed in the right direction.



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?8718a7fe8a79f3341104e5811c0ceb14>