Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 18 Jun 2004 14:38:09 -0400 (EDT)
From:      "Steve Bertrand" <iaccounts@ibctech.ca>
To:        freebsd-questions@freebsd.org
Subject:   3 servers using jails
Message-ID:  <3564.209.167.16.15.1087583889.squirrel@webmail.ibctech.ca>

next in thread | raw e-mail | index | archive | help
Hi all,

I've got 3 devices that I would like to consolodate.

Box A - IPFW/Nat gateway for corporate use.
Box B - Squid/Dansguardian content filter (my use)
Box C - Qmail/vpopmail (multiple domain) mailhub

All three boxes are at separate locations.

What I would like to do is implement a system (at the company Box A is at)
that can house all three servers in one box. This is what I'd like to
achieve:

- Route/filter packets from corporate LAN to Internet
- Continue to use the content filter/proxy for my family
- Forward corporate LAN http traffic through the proxy
- Continue to use the mailhub for everyone that is using it now

I am curious to know if this can be jailed. 2 jails plus the main system,
one with each virtual server mentioned above. If I can, will this be
possible:

- 1 public IP serving each server
- ability to ipfw fwd all http traffic from the corporate LAN over to the
virtual server running the proxy (on it's own public IP), as to deny
certain web traffic
- ability to use the proxy (again, with it's own public IP) from my house
- have the mailhub on it's own public IP in it's own jail (or within the
main system itself)
- be able to use IPFW to control access, filter traffic for all jails by
using each interfaces IP address as if there was no jails

I hope I have been clear and consice. Please advise if further
clarification is neccesary, and thanks in advance for any advice.

~sb



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?3564.209.167.16.15.1087583889.squirrel>