From owner-freebsd-questions@FreeBSD.ORG Sun Apr 18 02:14:49 2010 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 47BFA106566B for ; Sun, 18 Apr 2010 02:14:49 +0000 (UTC) (envelope-from apseudoutopia@gmail.com) Received: from mail-ww0-f54.google.com (mail-ww0-f54.google.com [74.125.82.54]) by mx1.freebsd.org (Postfix) with ESMTP id D12988FC15 for ; Sun, 18 Apr 2010 02:14:48 +0000 (UTC) Received: by wwa36 with SMTP id 36so2342301wwa.13 for ; Sat, 17 Apr 2010 19:14:47 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:received:in-reply-to:references :date:received:message-id:subject:from:to:cc:content-type :content-transfer-encoding; bh=7uzyz9MisMQFgNX9ehWOtu5YdT+nKBbEIPKtKDHCv4A=; b=AkIsS/BRKB5g+S9NSqGc1v8236KHh8Llt9+74+vtb0PkMtlp0J/A/m1IpcBElAwlk5 Jgz7e6P1Px1QFzj6LP3s9/WBd+yLg7xlsCn8E+LwcprRXiA3qTqM7Zo+BhyeBGtJkOxo vGbDvxvRLL/1C6f50dF5CcKFHm0AJT5E/uF6E= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type:content-transfer-encoding; b=gQ0RCh1OX96jYiHtShBs9AgeDNpBKk26BRGPoVAoCf16gCm0Q0ixeRvv8Kt74hk7YI CZCw7FywC4vWWNtx3wQ54BZgmiN0b6FsNFvWVc9DqsMwG0UaBOJSqizx6vjljLPmk6JN tY/XFzt9DymmljbbMShD+f/0wti4nk/3itFvg= MIME-Version: 1.0 Received: by 10.216.220.219 with HTTP; Sat, 17 Apr 2010 19:14:47 -0700 (PDT) In-Reply-To: <4BCA54DC.1000301@comclark.com> References: <4BCA54DC.1000301@comclark.com> Date: Sat, 17 Apr 2010 22:14:47 -0400 Received: by 10.216.174.129 with SMTP id x1mr2762745wel.140.1271556887563; Sat, 17 Apr 2010 19:14:47 -0700 (PDT) Message-ID: From: APseudoUtopia To: Aiza Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Cc: FreeBSD Questions Subject: Re: Ping from jail not permitted error X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 18 Apr 2010 02:14:49 -0000 On Sat, Apr 17, 2010 at 8:39 PM, Aiza wrote: > My jail has public internet access because i can do pkg_add -r unix2dos a= nd > the package does install. But when I enter ping -c 2 freebsd.org I get > message "ping: socket: Operation not permitted" =C2=A0There is no firewal= l > running in the jail. > > Any ideas would be helpful. > > Thanks There is a sysctl option on the host which disallows raw sockets from inside any jails, security.jail.allow.raw_sockets See the jail manpage.