Date: Thu, 31 Jan 2002 21:34:23 -0800 From: "Crist J. Clark" <cristjc@earthlink.net> To: Tim Gustafson <tim@falconsoft.com> Cc: freebsd-questions@FreeBSD.ORG Subject: Re: Jail and PING / NSLOOKUP Message-ID: <20020131213423.J152@gohan.cjclark.org> In-Reply-To: <Pine.BSF.4.21.0201301931490.74162-100000@falconsoft.com>; from tim@falconsoft.com on Wed, Jan 30, 2002 at 07:34:50PM %2B0000 References: <Pine.BSF.4.21.0201301931490.74162-100000@falconsoft.com>
next in thread | previous in thread | raw e-mail | index | archive | help
On Wed, Jan 30, 2002 at 07:34:50PM +0000, Tim Gustafson wrote:
> Hello
>
> I just started up three jails on my machine and they are all working
> beautifully, except for PING and NSLOOKUPs.
>
> Pings flat-out don't work. I get "ping: socket: Operation not
> permitted" when I try to ping a host, regardless of wether or not I'm
> root.
ping(8) does not work from a jail(8). This is a feature, not a
bug. Once cannot open a raw socket in a jail. A raw socket is needed
to send out an ICMP datagram.
> Nslookup works about 80% of the time, but they time out a lot. They use
> the same name server as the main machine, but are much more prone to
> failing and much slower.
nslookup(8) bad. It very bad. nslookup(8) depricated. Do not use
nslookup(8). Use host(1) and dig(1). If you still have weird results
with those, they will be easier to debug.
--
Crist J. Clark | cjclark@alum.mit.edu
| cjclark@jhu.edu
http://people.freebsd.org/~cjc/ | cjc@freebsd.org
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20020131213423.J152>