From owner-freebsd-questions@FreeBSD.ORG Fri Feb 23 16:48:23 2007 Return-Path: X-Original-To: freebsd-questions@freebsd.org Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id E9AAA16A408 for ; Fri, 23 Feb 2007 16:48:23 +0000 (UTC) (envelope-from h.schmalzbauer@omnisec.de) Received: from host.omnisec.de (host.omnisec.de [62.245.232.135]) by mx1.freebsd.org (Postfix) with ESMTP id 4C93413C478 for ; Fri, 23 Feb 2007 16:48:23 +0000 (UTC) (envelope-from h.schmalzbauer@omnisec.de) Received: from tek.flintsbach.schmalzbauer.de (tek.flintsbach.schmalzbauer.de [172.21.2.3]) by host.omnisec.de (8.13.8/8.13.8) with ESMTP id l1NGKWrv043570 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Fri, 23 Feb 2007 17:20:37 +0100 (CET) (envelope-from h.schmalzbauer@omnisec.de) Received: from titan.flintsbach.schmalzbauer.de (titan.flintsbach.schmalzbauer.de [IPv6:fec0::1:0:0:1:1]) by tek.flintsbach.schmalzbauer.de (8.13.8/8.13.8) with ESMTP id l1NGKWK5009098; Fri, 23 Feb 2007 17:20:32 +0100 (CET) (envelope-from h.schmalzbauer@omnisec.de) Received: from localhost (localhost [[UNIX: localhost]]) by titan.flintsbach.schmalzbauer.de (8.13.8/8.13.8/Submit) id l1NGKVW1003910; Fri, 23 Feb 2007 17:20:31 +0100 (CET) (envelope-from h.schmalzbauer@omnisec.de) From: Harald Schmalzbauer Organization: OmniSEC To: freebsd-questions@freebsd.org Date: Fri, 23 Feb 2007 17:20:31 +0100 User-Agent: KMail/1.9.4 References: <80f4f2b20702221722q1de96eaaq426b061ae47f20fb@mail.gmail.com> <20070223014121.GA2803@osiris.chen.org.nz> <80f4f2b20702221749v230eefe8j86fb27de25a7df7a@mail.gmail.com> In-Reply-To: <80f4f2b20702221749v230eefe8j86fb27de25a7df7a@mail.gmail.com> MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Content-Disposition: inline Message-Id: <200702231720.31936.h.schmalzbauer@omnisec.de> Cc: Jim Stapleton , Jonathan Chen Subject: Re: problems with jail X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 23 Feb 2007 16:48:24 -0000 Am Freitag, 23. Februar 2007 02:49 schrieb Jim Stapleton: > oops, did a reply instead of reply all, sorry. > > My question was "what's the best way to test net connectivity in jail, > csup?", and i did try csup (using a copy of my standard ports =46or ping (and other ICMP tools etc.) you have to change the following on = the=20 host: 'sysctl security.jail.allow_raw_sockets=3D1' See the man (8) jail for more info! Greetings, =2DHarry > supfile), it failed: > > %csup -g -L 2 /etc/supfile-ports > Parsing supfile "/etc/supfile-ports" > Connecting to cvsup12.FreeBSD.org > Name lookup failure for "cvsup12.FreeBSD.org": hostname nor servname > provided, or not known > Will retry at 20:52:12 > > > I'm only using one jail (it'll run apache, mysql and possibly sftp) > > Thanks, > -Jim Stapleton > > On 2/23/07, Jonathan Chen wrote: > > On Fri, Feb 23, 2007 at 01:22:53AM +0000, Jim Stapleton wrote: > > > I'd like to get Apache running in jail, but I can't seem to get > > > network working in jail. > > > > [...] > > > > > Anyway, when I go to jail, running csh (as root) in jail, I try/get: > > > %ping 192.168.1.1 > > > ping: socket: Operation not permitted > > > > This is normal. You can't ping out from a jail. If you're going to > > manage several jails on a box, I would suggest you try the ezjail > > port. > > > > Cheers. > > -- > > Jonathan Chen > > ----------------------------------------------------------------------- > > "I love deadlines. I like the whooshing sound they make as they fly by" > > - Douglas Adams > > _______________________________________________ > freebsd-questions@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-questions > To unsubscribe, send any mail to > "freebsd-questions-unsubscribe@freebsd.org" =2D-=20 OmniSEC - UNIX und Windows Netzwerke - Sicher Harald Schmalzbauer =46lintsbacher Str. 3 80686 M=FCnchen +49 (0) 89 18947781 +49 (0) 160 93860101