From owner-freebsd-stable@freebsd.org Mon Aug 24 21:31:58 2015 Return-Path: Delivered-To: freebsd-stable@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 51E4F9C2414 for ; Mon, 24 Aug 2015 21:31:58 +0000 (UTC) (envelope-from lists@searchy.net) Received: from j006.host001.searchy.nl (j006.host001.searchy.nl [79.143.214.199]) by mx1.freebsd.org (Postfix) with ESMTP id 1C1609C1 for ; Mon, 24 Aug 2015 21:31:57 +0000 (UTC) (envelope-from lists@searchy.net) Received: from [192.168.5.21] (5418453B.cm-5-1b.dynamic.ziggo.nl [84.24.69.59]) (Authenticated sender: ppi@j006.host001.searchy.nl) by j006.host001.searchy.nl (Postfix) with ESMTPSA id 3CBC71E8C1D for ; Mon, 24 Aug 2015 21:24:12 +0000 (UTC) Message-ID: <55DB8B79.40700@searchy.net> Date: Mon, 24 Aug 2015 23:24:09 +0200 From: "Frank de Bot (lists)" User-Agent: Mozilla/5.0 (X11; Linux i686; rv:34.0) Gecko/20100101 Firefox/34.0 SeaMonkey/2.31 MIME-Version: 1.0 To: freebsd-stable@freebsd.org Subject: Multiple IP/subnet in jail, source address for connections Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit X-BeenThere: freebsd-stable@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: Production branch of FreeBSD source code List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 24 Aug 2015 21:31:58 -0000 Hello, I'm trying to have jail with a public and a private IP address. Both are on the same interface. The public is called 79.x.x.213 and private 10.4.3.6 Out from ifconfig within the jail is: inet 79.x.x.213 netmask 0xffffffff broadcast 79.x.x.213 inet 10.4.3.6 netmask 0xffffffff broadcast 10.4.3.6 When I try to reach a host on the 10.4.3.0/24 network, it will use the source address 79.x.x.123 (seen with tcpdump) When done outside of the jail on the server, it does have the right source address. How can I get my jail to have the right source address? Some tools provide a way to define a source address, like telnet -s, but it's not workable. Frank de Bot