From owner-freebsd-questions Wed Dec 4 8:23:48 2002 Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id EA78E37B401 for ; Wed, 4 Dec 2002 08:23:46 -0800 (PST) Received: from homer.bignose.ca (static-89-42.dsl.tht.net [216.126.89.42]) by mx1.FreeBSD.org (Postfix) with SMTP id F24B543E88 for ; Wed, 4 Dec 2002 08:23:45 -0800 (PST) (envelope-from jeff@interchange.ca) Received: (qmail 19367 invoked from network); 4 Dec 2002 16:22:54 -0000 Received: from unknown (HELO jeffmfgsfzhqjc) (192.168.0.2) by 192.168.0.1 with SMTP; 4 Dec 2002 16:22:54 -0000 From: "Jeff MacDonald" To: "Dan Pelleg" Cc: Subject: RE: Another Jail Question Date: Wed, 4 Dec 2002 11:23:47 -0500 Message-ID: MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit X-Priority: 3 (Normal) X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook IMO, Build 9.0.2416 (9.0.2910.0) In-Reply-To: X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000 Importance: Normal Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG Hi, I run proftpd which aready allows jailed processes in a matter of speaking that is, it chroots particular users. but i have a spare sparc laying here, that is gonna do nat just fine, so i might as well use it as a dedicated firewall as well. jeff. > -----Original Message----- > From: dpelleg@gs166.sp.cs.cmu.edu [mailto:dpelleg@gs166.sp.cs.cmu.edu]On > Behalf Of Dan Pelleg > Sent: Wednesday, December 04, 2002 11:08 AM > To: Jeff MacDonald > Cc: freebsd-questions@FreeBSD.ORG > Subject: Re: Another Jail Question > > > "Jeff MacDonald" writes: > > > Hi, > > > > I have been thinking about running 2 jails on my home server > > one for "work sensitive" data, the other for personal fun stuff. > > > > However i only have 1 ip at my house [static]. > > > > Could i take the server taht will have jails on it, put it behind > > a natd box so it has 2 ip's [192.168.0.1 and .2] and just make > > the nat box, forward packets to teh appropriate jail based upon > > what port they come in on ? > > > > Yes, and you don't even need a separate box to do NAT - the jail host can > do it by itself. Here's a how-to for a jailed FTP process configured like > this: > > http://ezine.daemonnews.org/200212/ftpjail.html > > -- > > Dan Pelleg > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message