From owner-freebsd-net@FreeBSD.ORG Mon Feb 9 20:32:58 2004 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 1E76216A4CE for ; Mon, 9 Feb 2004 20:32:58 -0800 (PST) Received: from mail.drunkencomputing.de (ratz.drunkencomputing.de [195.244.235.248]) by mx1.FreeBSD.org (Postfix) with ESMTP id E63E743D39 for ; Mon, 9 Feb 2004 20:32:57 -0800 (PST) (envelope-from hscholz@raisdorf.net) Received: from localhost (localhost [127.0.0.1]) by mail.drunkencomputing.de (Postfix) with ESMTP id 2EE428B44A for ; Tue, 10 Feb 2004 05:31:48 +0100 (CET) Received: from mail.drunkencomputing.de ([127.0.0.1])port 10024) with ESMTP id 53709-09 for ; Tue, 10 Feb 2004 05:31:47 +0100 (CET) Received: from [10.0.1.2] (c-24-30-48-121.mw.client2.attbi.com [24.30.48.121]) by mail.drunkencomputing.de (Postfix) with ESMTP id A11F28B350 for ; Tue, 10 Feb 2004 05:31:41 +0100 (CET) Mime-Version: 1.0 (Apple Message framework v612) Content-Transfer-Encoding: 7bit Message-Id: <1BEABD96-5B82-11D8-A0D4-000A95BAD088@raisdorf.net> Content-Type: text/plain; charset=US-ASCII; format=flowed To: freebsd-net@freebsd.org From: Hendrik Scholz Date: Mon, 9 Feb 2004 23:32:17 -0500 X-Mailer: Apple Mail (2.612) X-Virus-Scanned: by amavisd-new at drunkencomputing.de Subject: remote traceroute and ping for jails X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 10 Feb 2004 04:32:58 -0000 Hi! I've just finished a quick hack to allow jails to indirectly execute ping and traceroute by sending commands to the FreeBSD host housing the jails. A small daemon processes the requests and sends the reply back to the clients. Just grab http://www.wormulon.net/files/FreeBSD/rsocket-HEAD.tar.gz and don't forget to modify defs.h :) 'features': - should be safe from 'hack' attempts like "traceroute 123.org;id" - IPv6 ready ... just need to add some lines - executes ping -c 4 and does not offer any way to modify parameters - works for me :) Any comments are welcome! Thanks, Hendrik -- Hendrik Scholz - hscholz@raisdorf.net - http://www.raisdorf.net/ cell phone: 404-606-5324 (US) 0160-1570-272 (DE)