From owner-freebsd-jail@FreeBSD.ORG  Mon Jul 27 14:53:25 2009
Return-Path: <owner-freebsd-jail@FreeBSD.ORG>
Delivered-To: freebsd-jail@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id 8BDAD1065670;
	Mon, 27 Jul 2009 14:53:25 +0000 (UTC) (envelope-from bz@FreeBSD.org)
Received: from mail.cksoft.de (mail.cksoft.de [195.88.108.3])
	by mx1.freebsd.org (Postfix) with ESMTP id CCFA68FC1B;
	Mon, 27 Jul 2009 14:53:24 +0000 (UTC) (envelope-from bz@FreeBSD.org)
Received: from localhost (amavis.fra.cksoft.de [192.168.74.71])
	by mail.cksoft.de (Postfix) with ESMTP id 9155241C67E;
	Mon, 27 Jul 2009 16:36:20 +0200 (CEST)
X-Virus-Scanned: amavisd-new at cksoft.de
Received: from mail.cksoft.de ([195.88.108.3])
	by localhost (amavis.fra.cksoft.de [192.168.74.71]) (amavisd-new,
	port 10024)
	with ESMTP id 7TP9tbWxuD1K; Mon, 27 Jul 2009 16:36:20 +0200 (CEST)
Received: by mail.cksoft.de (Postfix, from userid 66)
	id 3A43941C67B; Mon, 27 Jul 2009 16:36:20 +0200 (CEST)
Received: from maildrop.int.zabbadoz.net (maildrop.int.zabbadoz.net
	[10.111.66.10])
	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
	(No client certificate requested)
	by mail.int.zabbadoz.net (Postfix) with ESMTP id D502B4448E6;
	Mon, 27 Jul 2009 14:35:48 +0000 (UTC)
Date: Mon, 27 Jul 2009 14:35:48 +0000 (UTC)
From: "Bjoern A. Zeeb" <bz@FreeBSD.org>
X-X-Sender: bz@maildrop.int.zabbadoz.net
To: Mykola Dzham <freebsd@levsha.org.ua>
In-Reply-To: <20090725163207.GP39538@expo.ukrweb.net>
Message-ID: <20090727141808.R245@maildrop.int.zabbadoz.net>
References: <20090725163207.GP39538@expo.ukrweb.net>
X-OpenPGP-Key: 0x14003F198FEFA3E77207EE8D2B58B8F83CCF1842
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII; format=flowed
Cc: freebsd-jail@freebsd.org, freebsd-current@freebsd.org,
	Jamie Gritton <jamie@freebsd.org>
Subject: Re: 8.0 still allow creating ipv6 udp socket in jail without ipv6 ip
X-BeenThere: freebsd-jail@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: "Discussion about FreeBSD jail\(8\)" <freebsd-jail.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-jail>,
	<mailto:freebsd-jail-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-jail>
List-Post: <mailto:freebsd-jail@freebsd.org>
List-Help: <mailto:freebsd-jail-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-jail>,
	<mailto:freebsd-jail-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Mon, 27 Jul 2009 14:53:26 -0000

On Sat, 25 Jul 2009, Mykola Dzham wrote:

Hi,

> After r188146 creating tcp ipv6 socket in jail without ipv6 ip is not
> allowed, but udp socket is allowed.

I cannot really follow what you are trying to say as wrt IPv4 and IPv6
sockets and what about UDP.

Your sample further down is trying to use an IPv4 address on an IPv6
Datagram socket which is an error either way.

Prior to FreeBSD 7.2 IPv6 hadn't been supported at all for jails.

With 7.2 it was possible to create IPv6 sockets (but only shortly and
then fail on bind/connect/...).  With the commit you reference the
"Protocol not supported" came back in case there was no address of
that address family for a given jail.

With 8 the primary syntax for jails has changed and the "backward
compat mode" again allows you to create a socket on a jail even if
no address of the same family was configured for the jail.

This should be addressed by the following patch:
http://people.freebsd.org/~bz/20090727-01-jail8-legacy.diff

Can you give it a try and report if that fixes your problem?

Regards,
Bjoern

-- 
Bjoern A. Zeeb                      The greatest risk is not taking one.