Date: Tue, 17 Nov 2009 10:18:59 +0100 From: "Scheithauer, Lars (FH)" <Lars.Scheithauer@fh-heidelberg.de> To: <freebsd-jail@freebsd.org> Subject: Networking from jail Message-ID: <26040005B7F3AA41A0345BCE386CA09701C62A79@FHCLUSRV-EX.dcs.fh-heidelberg.de>
next in thread | raw e-mail | index | archive | help
Hi everyone!
I'm having a little trouble with my jail's networking and I'm not sure
what to make of it.
My jailhost has an IP of x.y.z.48, my test jail is x.y.z.49. The
jailhost has both IP-adresses, the jail has just it's own:
Jail# ifconfig
bce0: flags=3D8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu
1500
=20
options=3D1bb<RXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING,JUMBO_MTU,VLAN_HWCSUM=
,
TSO4>
ether xx:xx:xx:xx:xx:10
inet x.y.z.60 netmask 0xffffffc0 broadcast x.y.z.63
media: Ethernet autoselect (1000baseSX <full-duplex>)
status: active
[...]
Host# ifconfig
bce0: flags=3D8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu
1500
=20
options=3D1bb<RXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING,JUMBO_MTU,VLAN_HWCSUM=
,
TSO4>
ether xx:xx:xx:xx:xx:10
inet x.y.z.61 netmask 0xffffffc0 broadcast x.y.z.63
inet x.y.z.60 netmask 0xffffffc0 broadcast x.y.z.63
media: Ethernet autoselect (1000baseSX <full-duplex>)
status: active
[...]
I am able to access the ssh-server running on the jail, and I am able to
access the proxyserver of our network via telnet and get some pages of
the internet. However, if I want to install something from the ports,
the jail is unable to fetch it:
Jail# cd /usr/ports/ftp/wget
Jail# make
=3D=3D=3D> Vulnerability check disabled, database not found
=3D=3D=3D> Found saved configuration for wget-1.11.4_1
=3D> wget-1.11.4.tar.bz2 doesn't seem to exist in /usr/ports/distfiles/.
=3D> Attempting to fetch from http://ftp.gnu.org/gnu/wget/.
fetch: http://ftp.gnu.org/gnu/wget/wget-1.11.4.tar.bz2: Operation timed
out
=3D> Attempting to fetch from ftp://ftp.gnu.org/gnu/wget/.
[...]
I've set the appropriate environment variables HTTP_PROXY, HTTPS_PROXY
and FTP_PROXY. If I test the connection with netcat, I get the following
error message:
# nc -zvw 1 -x 'proxy.example.com:8080' www.freebsd.org 80
nc: read failed (0/3): Broken pipe
The funny thing is, that I have no problem installing ports from the
Host-system. From what I can tell, all the config files are correct:
Jail# cat /etc/rc.conf
sshd_enable=3D"YES"
ifconfig_bce0=3D"inet x.y.z.60 netmask 255.255.255.192"
defaultrouter=3D"x.y.z.62"
hostname=3D"jail.example.com"
Host# cat /etc/rc.conf
sshd_enable=3D"NO"
ifconfig_bce0=3D"inet x.y.z.61 netmask 255.255.255.192"
defaultrouter=3D"x.y.z.62"
hostname=3D"host.example.com"
ipv6_enable=3D"NO"
jail_enable=3D"YES"
jail_set_hostname_allow=3D"NO"
jail_list=3D"jail"
jail_jail_hostname=3D"jail"
jail_jail_ip=3D"x.y.z.60"
jail_jail_rootdir=3D"my/jail/root"
jail_jail_devfs_enable=3D"YES"
Any ideas?
Best Regards,
Lars
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?26040005B7F3AA41A0345BCE386CA09701C62A79>