Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 8 Feb 2006 18:37:17 +0200
From:      Vlad GALU <vladgalu@gmail.com>
To:        freebsd-stable@freebsd.org
Subject:   Re: OpenVPN within a Jail under 6.x ...
Message-ID:  <79722fad0602080837s28412e49g964332e509747c88@mail.gmail.com>
In-Reply-To: <20060208121704.L3207@ganymede.hub.org>
References:  <200602081321.k18DLpjo061917@lurza.secnetix.de> <20060208121704.L3207@ganymede.hub.org>

next in thread | previous in thread | raw e-mail | index | archive | help
On 2/8/06, Marc G. Fournier <scrappy@hub.org> wrote:
> On Wed, 8 Feb 2006, Oliver Fromme wrote:
>
> > Marc G. Fournier <scrappy@hub.org> wrote:
> > > Is this possible?  I'm reading through the man pages for openvpn, and
> > > doubt that it is with 4.x, since it requires access to /dev, but with=
 6.x
> > > using devfs to mount dev into the jail, is it possible to set it up?
> >
> > The problem isn't related to /dev.  It doesn't matter
> > whether your device nodes come from devfs (FreeBSD 6)
> > or have been created manually with MAKEDEV (FreeBSD 4),
> > both of which can be used for jails.
> >
> > The problem is that you need to configure interfaces
> > (tun(4) or tap(4)) to set up the VPN, but ifconfig(8)
> > does not work inside a jail.  That means you cannot
> > set up a VPN inside a jail.  However, you can _use_
> > it within a jail, of course, if you assign the IP of
> > the VPN connection to the jail
>
> 'k, how would you do that?  I thought you could only assign one IP to a
> jail, both in 4.x and 6.x?

   I think he meant binding OpenVPN to that jail's IP.

>
>
> ----
> Marc G. Fournier           Hub.Org Networking Services (http://www.hub.or=
g)
> Email: scrappy@hub.org           Yahoo!: yscrappy              ICQ: 76156=
64
> _______________________________________________
> freebsd-stable@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-stable
> To unsubscribe, send any mail to "freebsd-stable-unsubscribe@freebsd.org"
>


--
If it's there, and you can see it, it's real.
If it's not there, and you can see it, it's virtual.
If it's there, and you can't see it, it's transparent.
If it's not there, and you can't see it, you erased it.



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?79722fad0602080837s28412e49g964332e509747c88>