From owner-freebsd-questions@FreeBSD.ORG  Mon Mar 22 16:57:43 2010
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id 1E3CE106566B
	for <freebsd-questions@freebsd.org>;
	Mon, 22 Mar 2010 16:57:43 +0000 (UTC)
	(envelope-from mail25@bzerk.org)
Received: from ei.bzerk.org (tunnel490.ipv6.xs4all.nl
	[IPv6:2001:888:10:1ea::2])
	by mx1.freebsd.org (Postfix) with ESMTP id 809038FC0A
	for <freebsd-questions@freebsd.org>;
	Mon, 22 Mar 2010 16:57:42 +0000 (UTC)
Received: from ei.bzerk.org (BOFH@localhost [127.0.0.1])
	by ei.bzerk.org (8.14.3/8.14.3) with ESMTP id o2MGvRrN080116;
	Mon, 22 Mar 2010 17:57:27 +0100 (CET)
	(envelope-from mail25@bzerk.org)
Received: (from bulk@localhost)
	by ei.bzerk.org (8.14.3/8.14.3/Submit) id o2MGvQAJ080115;
	Mon, 22 Mar 2010 17:57:26 +0100 (CET)
	(envelope-from mail25@bzerk.org)
Date: Mon, 22 Mar 2010 17:57:26 +0100
From: Ruben de Groot <mail25@bzerk.org>
To: Aiza <aiza21@comclark.com>
Message-ID: <20100322165726.GA80072@ei.bzerk.org>
Mail-Followup-To: Ruben de Groot <mail25@bzerk.org>,
	Aiza <aiza21@comclark.com>, jj@dhenin.fr,
	Mark Shroyer <subscriber+freebsd@markshroyer.com>,
	freebsd-questions@freebsd.org
References: <4BA5AA53.5030503@comclark.com> <4BA69566.2040504@markshroyer.com>
	<4BA6B80F.7050806@comclark.com> <4BA6CB8B.8070309@markshroyer.com>
	<4BA73C9D.7090900@comclark.com>
	<20100322095545.GA77714@ei.bzerk.org>
	<12437d831003220323o4463044bu416f994f0129b459@mail.gmail.com>
	<20100322112235.GA78247@ei.bzerk.org> <4BA7655A.70604@comclark.com>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <4BA7655A.70604@comclark.com>
User-Agent: Mutt/1.4.2.3i
X-Spam-Status: No, score=-4.3 required=5.0 tests=ALL_TRUSTED,AWL,BAYES_00
	autolearn=ham version=3.2.5
X-Spam-Checker-Version: SpamAssassin 3.2.5 (2008-06-10) on ei.bzerk.org
X-Greylist: Sender IP whitelisted, not delayed by milter-greylist-4.0.1
	(ei.bzerk.org [127.0.0.1]); Mon, 22 Mar 2010 17:57:30 +0100 (CET)
Cc: Ruben de Groot <mail25@bzerk.org>,
	Mark Shroyer <subscriber+freebsd@markshroyer.com>, jj@dhenin.fr,
	freebsd-questions@freebsd.org
Subject: Re: ezjail
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Mon, 22 Mar 2010 16:57:43 -0000

On Mon, Mar 22, 2010 at 08:40:58PM +0800, Aiza typed:
> >
> >This will enable him to ping another host from within the jail. I won't 
> >do anything for ftp.
> >
> >OP: what exact error do you get? And does ftp work *within* the jail
> >(ftp localhost)?
> 
> with sysctl security.jail.allow_raw_sockets=1  done on the host. From 
> within the jail did ping -c 2 10.0.10.6 which is a pc on the lan gives 
> me socket: Operation not permitted mesg.

weird. did you actually execute the sysctl statement or just put it in 
/etc/sysctl.conf?

> And ftp from 10.0.10.6 to 10.0.20.30 the ftp jail gives me no connection 
> error.

This is not helpfull. Copy/paste the exact error message (and what you did.
We are not psychics).

> Just how am i to determine if ftp work *within* the jail ftp localhost?

As I said: from within the jail, execute the command "ftp localhost". No rocket
science involved.