Date: Mon, 3 Feb 2003 00:00:59 +0300 (MSK) From: "."@babolo.ru To: Yakov Sudeikin <yashka@exebook.com> Cc: freebsd-hackers@FreeBSD.ORG Subject: Re: Routing within a Jail Message-ID: <200302022101.h12L0x1a012095@aaz.links.ru> In-Reply-To: <00cf01c2cacd$4c786420$01e6a8c0@homenet>
next in thread | previous in thread | raw e-mail | index | archive | help
> Hi freebsd-hackers, > > Jail with multiple LAN cards accessible from within? > > I have my 4.7 box serving a lot of things, and I have a Linux box routing > the network packets for people in my block. I am not an administraotr of the > router. I want to get rid of the Linux station, I want to create a jail on > my FreeBSD box and start a router + firewall there. As far as I know this is > not possible, jail is started binded to single IP. And I need to route > between different interfaces and even differend LAN cards. One of them is > WaveLan, others are Ethernet rl0 like. I want the router to be in the jail > for security purposes, and have all my services also in the other jails > (mysql, apache, ftp, mail, named, samba etc). And I want the host system > ONLY serve jails and do nothing else by itself. Is FreeBSD jail subsystem > mature enough to accomplish this? Use different boxes for router and for services. Strip every internet accessable socket on router for security. -- @BABOLO http://links.ru/ To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-hackers" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200302022101.h12L0x1a012095>