From owner-freebsd-stable@freebsd.org Fri Mar 23 15:01:37 2018 Return-Path: Delivered-To: freebsd-stable@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 3C47DF4F093 for ; Fri, 23 Mar 2018 15:01:37 +0000 (UTC) (envelope-from joerg_surmann@elektropost.org) Received: from elektropost.org (elektropost.org [217.115.13.198]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 9E25F7846D for ; Fri, 23 Mar 2018 15:01:36 +0000 (UTC) (envelope-from joerg_surmann@elektropost.org) Received: (qmail 33898 invoked from network); 23 Mar 2018 15:01:34 -0000 Received: from elektropost.org (HELO elektropost.org) (joerg?surmann) by elektropost.org with ESMTPS (DHE-RSA-AES128-SHA encrypted); 23 Mar 2018 15:01:34 -0000 To: freebsd-stable@freebsd.org. From: Joerg Surmann Subject: Two NIC's inside a Jail Message-ID: <785ce70f-3f2d-3422-0e95-146b05f7f768@elektropost.org> Date: Fri, 23 Mar 2018 16:01:30 +0100 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Thunderbird/52.6.0 MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="sqBIekZkZ7zcxGyRub0v1VWwKHHtNEmLJ" X-BeenThere: freebsd-stable@freebsd.org X-Mailman-Version: 2.1.25 Precedence: list List-Id: Production branch of FreeBSD source code List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 23 Mar 2018 15:01:37 -0000 This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --sqBIekZkZ7zcxGyRub0v1VWwKHHtNEmLJ Content-Type: multipart/mixed; boundary="h7IyF2OY3LAHI0zaLVdIU8LDVer66a1qh"; protected-headers="v1" From: Joerg Surmann To: freebsd-stable@freebsd.org. Message-ID: <785ce70f-3f2d-3422-0e95-146b05f7f768@elektropost.org> Subject: Two NIC's inside a Jail --h7IyF2OY3LAHI0zaLVdIU8LDVer66a1qh Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Content-Language: de-DE Hi all, I have a Problem to understund how to manage 2 Networks inside a Jail. i have create a jail (using ezjail) with a alias IP. in rc.conf (on Host): ifconfig_vmx0=3D"inet 192.168.100.1 netmask 255.255.255.0" ifconfig_vmx0_alias0=3D"inet 192.168.100.2 netmask 255.255.255.0"=C2=A0 <= - this is the jail ip Inside the jail running apachhe24. Now i add a new NIC to the System. in rc.conf (on Host): ifconfig_em0=3D"inet 213.70.80.92 netmask 255.255.255.0" in /usr/local/etc/ezjail/myjail.conf: i add the new ip export jail_myjail_ip=3D"192.168.100.2,213.70.80.92" Restart the jail and ifconfig looks fine. vmx0 -> inet 192.168.100.2 em0=C2=A0 -> inet 213.70.80.92 Apache Listen on all NIC's () But i can see my Website only via 192.168.100.2 from intern Network. The Host is behind a Firewall. The IP=C2=A0 213.70.80.92 is enabled for incomming Traffic. When i give the Hostname in a Browser i become "connection Timeout". What is to do that the Host is accessable from Inet? Thanks Holm --h7IyF2OY3LAHI0zaLVdIU8LDVer66a1qh-- --sqBIekZkZ7zcxGyRub0v1VWwKHHtNEmLJ Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEKgIE1afOeXZNzpBEGHz25TAa4ssFAlq1FsoACgkQGHz25TAa 4ss79BAAsg85bLX26JL2OcuXwLGI9zdtSULoyfeTua5ucXESeN/M682RV1g9mLim SbbUYK0VbesCe752vYRsDFQbVWLNRsE77d+fTH7fWnxR/Jb3bmcOX+PlyN2cSWpu hbgOyuS+YMZ/FcUnVGwgtCXVhtuxVIy0BckkBf+x8px2SkdyAGy2mSwkP0/kTenj g4S+QyCcMBrWrQZodaRoZterMPtqFtA1jgYxBuyv9fvt+3MmdyycYyaNoQAX1HPq QvVoxPlx3SnZwC8+1NTKPvQ7tJXC3qDtukQ4faCrt05nq1+BernJjgPZwPHnMv+X w33UqfjPpL6nl1IA5AlGN1PuEVaS4EFkMEbbuDK+WWAeiSzZSZYkrD6yqfrC21jZ wJBEMIW4+ZC9DC6920EF88I/DW0++D4eV7k4jAKXN8iuOXeThZb8fR0Kw4gU10bn LTUOTx+Sdfq2qY/Y1bcH31eD1wC9oYKnB/oPvgxdSKl2rYqOzsVUoq4R5Ry37HdC 43cqDBp7QykcEqvIA9z6405gc47hiLS+yEVCfnfeL5o01UABDfWf2r6l2i8W4m1U J3KJ6U1cNkiwDRB6oC8GJPdiDHVA/PJKkWIV88auUh7swZeYyqzCAkQ24yMlvYxv LoYu5ZsoXBvaz/dZHg9w0ZJV3rBr+RdOKLl1APOJb5eWXlT7/b8= =5wL+ -----END PGP SIGNATURE----- --sqBIekZkZ7zcxGyRub0v1VWwKHHtNEmLJ--