From owner-freebsd-jail@FreeBSD.ORG Thu Oct 2 16:37:27 2014 Return-Path: Delivered-To: freebsd-jail@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id DA7B5DE3; Thu, 2 Oct 2014 16:37:27 +0000 (UTC) Received: from relay.mailchannels.net (aso-006-i424.relay.mailchannels.net [174.136.13.70]) by mx1.freebsd.org (Postfix) with ESMTP id A0C23CED; Thu, 2 Oct 2014 16:37:25 +0000 (UTC) X-Sender-Id: _forwarded-from|184.56.208.198 Received: from mail-24.name-services.com (ip-10-204-4-183.us-west-2.compute.internal [10.204.4.183]) by relay.mailchannels.net (Postfix) with ESMTPA id 8BF5C60F0C; Thu, 2 Oct 2014 16:28:26 +0000 (UTC) X-Sender-Id: _forwarded-from|184.56.208.198 Received: from mail-24.name-services.com (mail-24.name-services.com [10.245.145.206]) (using TLSv1 with cipher AES128-SHA) by 0.0.0.0:2500 (trex/5.2.14); Thu, 02 Oct 2014 16:28:30 GMT X-MC-Relay: Forwarding X-MailChannels-SenderId: _forwarded-from|184.56.208.198 X-MailChannels-Auth-Id: demandmedia X-MC-Loop-Signature: 1412267309464:147875531 X-MC-Ingress-Time: 1412267308507 Received: from [192.168.1.100] (cpe-184-56-208-198.neo.res.rr.com [184.56.208.198]) by mail-24.name-services.com with SMTP; Thu, 2 Oct 2014 09:28:20 -0700 Message-ID: <542D7D27.5050302@a1poweruser.com> Date: Thu, 02 Oct 2014 12:28:23 -0400 From: Fbsd8 User-Agent: Thunderbird 2.0.0.24 (Windows/20100228) MIME-Version: 1.0 To: Erich Dollansky Subject: Re: no network connection from inside a jail References: <20141002180506.4965760b@X220.alogt.com> In-Reply-To: <20141002180506.4965760b@X220.alogt.com> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Cc: freebsd-jail@freebsd.org, freebsd-stable@freebsd.org X-BeenThere: freebsd-jail@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: "Discussion about FreeBSD jail\(8\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 02 Oct 2014 16:37:28 -0000 Erich Dollansky wrote: > Hi, > > I recently upgraded to 10.1 BETA3 via sources. All seemed to be fine > until I started jails which connect to the Internet. It simply does not > work anymore. When the browser from the jail connects to another jail > on the same machine via HTTP, it all works. Accesses to the ouside of > the machine fails. > > Even a ping to a local device does not work. > > ping 192.168.yyy.xxx > ping: socket: Operation not permitted > > despite having > > security.jail.allow_raw_sockets: 1 > > Just to make sure, I upgraded also the world in all jails without any > difference. > > UPDATING did not mention any changes since BETA1. > > I feel a bit lost now. > > What could have caused the problems? > > Erich What version of the base system are your jails at? IE: are they at 10.0 or 10.1 xxx or some older version? What method did you use to define your jails [rc.conf or jail.conf]?