Date: Thu, 22 Apr 2004 14:52:28 +0300 From: Alex Lyashkov <shadow@psoft.net> To: Pawel Jakub Dawidek <pjd@FreeBSD.org> Cc: freebsd-hackers@FreeBSD.org Subject: Re: [patch] Raw sockets in jails Message-ID: <1082634747.8239.39.camel@berloga.shadowland> In-Reply-To: <20040422113002.GW24376@darkness.comp.waw.pl> References: <20040420015638.A84821@staff.seccuris.com> <14522.1082452837@critter.freebsd.dk> <20040420200027.A51891@staff.seccuris.com> <20040422113002.GW24376@darkness.comp.waw.pl>
next in thread | previous in thread | raw e-mail | index | archive | help
=F7 =FE=D4=D7, 22.04.2004, =D7 14:30, Pawel Jakub Dawidek =D0=C9=DB=C5=D4: > On Tue, Apr 20, 2004 at 08:00:27PM +0000, Christian S.J. Peron wrote: > +> Poul/group > +>=20 > +> The following patch makes raw sockets comply with prison IP addresses. > +> Some tools such as traceroute(8) may require that the prison IP addres= s > +> be specified on the command line. I.E. > +>=20 > +> traceroute -s <prison ip> <dest address> > +>=20 > +> Otherwise it might fail. > +>=20 > +> (because of this we may want to get rid of the > +> create_raw_sockets MIB all together). > +>=20 > +> Anyway, take a gander at it (testers feedback welcome): >=20 > Looks very neat! I've merge your patch to my jail work (pjd_jail perforce > branch) and changed it to be usable with my multiple ips stuff. > I haven't reviewed nor tested it yet. You don`t plain do port vimage to -current ? --=20 Alex Lyashkov <shadow@psoft.net> PSoft
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?1082634747.8239.39.camel>