From owner-freebsd-stable@FreeBSD.ORG Wed Dec 19 11:56:28 2012 Return-Path: Delivered-To: freebsd-stable@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id D8CC95CD for ; Wed, 19 Dec 2012 11:56:28 +0000 (UTC) (envelope-from h.schmalzbauer@omnilan.de) Received: from host.omnilan.net (s1.omnilan.net [62.245.232.135]) by mx1.freebsd.org (Postfix) with ESMTP id 61E358FC0A for ; Wed, 19 Dec 2012 11:56:27 +0000 (UTC) Received: from titan.inop.wdn.omnilan.net (titan.inop.wdn.omnilan.net [172.21.3.1]) (authenticated bits=0) by host.omnilan.net (8.13.8/8.13.8) with ESMTP id qBJC0kil060494 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Wed, 19 Dec 2012 13:00:46 +0100 (CET) (envelope-from h.schmalzbauer@omnilan.de) Message-ID: <50D1AB6A.402@omnilan.de> Date: Wed, 19 Dec 2012 12:56:26 +0100 From: Harald Schmalzbauer Organization: OmniLAN User-Agent: Mozilla/5.0 (X11; U; FreeBSD i386; de-DE; rv:1.9.2.8) Gecko/20100906 Lightning/1.0b2 Thunderbird/3.1.2 MIME-Version: 1.0 To: freebsd-stable@freebsd.org Subject: Re: FIB and jail regression [Was: can't reach jails own ipv4 from inside anymore] References: <50D1A2B2.6040204@omnilan.de> In-Reply-To: <50D1A2B2.6040204@omnilan.de> X-Enigmail-Version: 1.1.2 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="------------enigE2D52C5E75BADFBB5B982DBB" X-BeenThere: freebsd-stable@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: Production branch of FreeBSD source code List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 19 Dec 2012 11:56:28 -0000 This is an OpenPGP/MIME signed message (RFC 2440 and 3156) --------------enigE2D52C5E75BADFBB5B982DBB Content-Type: text/plain; charset=ISO-8859-15 Content-Transfer-Encoding: quoted-printable schrieb Harald Schmalzbauer am 19.12.2012 12:19 (localtime): > Hello, > > with 8.2 I could "ssh IPofTheJail" inside the jail and got connected to= > the sshd in the corresponding jail. Same with "ssh localhost". > > With 9.1, it's not possible anymore. > I have assigned a different FIB to my jail in both cases. > > The picture is different for IPv6. "ping6 IPofTheJail" does work! > > I have more oddities I wanted to check with jails and lagg-interfaces > together with VLANs, but I have no idea why I can't connect from one > jail to it's own IP(v4) anymore! Found out that defining a different FIB causes that behaviour in 9.1. But using a different FIB doesn't caus the same in 8.2! Can anybody tell me what has changed regarding FIBs after 8.2? Thanks, -Harry --------------enigE2D52C5E75BADFBB5B982DBB Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.18 (FreeBSD) iEYEARECAAYFAlDRq2oACgkQLDqVQ9VXb8hqfQCfSZOjTYGRcBdV0JN5YF74P03J 55kAoLMl+JZYX5MCrNwaGdtLJvpHc0ah =dVQm -----END PGP SIGNATURE----- --------------enigE2D52C5E75BADFBB5B982DBB--