Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 6 Jul 2014 14:28:23 +0000
From:      Mark Felder <feld@freebsd.org>
To:        marko@markoturk.info, freebsd-questions@freebsd.org
Subject:   Re: 10.0-RELEASE openvpn jail with ezjail
Message-ID:  <8718a7fe8a79f3341104e5811c0ceb14@mail.feld.me>
In-Reply-To: <20140706102642.GA13371@vps.markoturk.info>

index | next in thread | previous in thread | raw e-mail

July 6 2014 5:36 AM, "Marko Turk"  wrote: 

> Hi,
> 
> I'm trying to create an OpenVPN jail on 10.0-RELEASE using tun device.

I have it working without issues. The only problem is that you cannot restart the daemon within the jail, you have to restart the jail.

host's /etc/rc.conf:

# needed for openvpn
gateway_enable="YES"
cloned_interfaces="tun0"

in my ezjail openvpn config:

export jail_openvpn_exec_prestart0="ifconfig tun0 10.8.0.1 10.8.0.2 netmask 255.255.255.0"
export jail_openvpn_exec_prestart1="route add -net 10.8.0.0/24 10.8.0.2"


That should get you pointed in the right direction.


home | help

Want to link to this message? Use this
URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?8718a7fe8a79f3341104e5811c0ceb14>