Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 18 Nov 2009 14:33:18 +0100
From:      jelmer <sociologieopzaterdag@gmail.com>
To:        freebsd-jail@freebsd.org
Subject:   Re: Broadcast under Jail problems
Message-ID:  <4c7a12550911180533y6bed77f5m222725c6a3ca87be@mail.gmail.com>

next in thread | raw e-mail | index | archive | help
(create a virtual network interface, and use packet filter)



  # ifconfig lo1 create

  # ifconfig lo1 inet 10.0.1.1 netmask 255.255.255.0

  # touch /etc/start_if.lo1

  # echo "ifconfig lo1 create" >> /etc/start_if.lo1

  # cp /usr/share/examples/pf/pf.conf /etc/



(existance of  pf.conf is just necessary, later I setup a complete one)




(allow networking for jails - required for the installation of ports)



*  # echo 'nat on bge0 from lo1:network to any -> (bge0)' >> /etc/pf.conf

  # pfctl -d

  # pfctl -e -f /etc/pf.conf

# echo '



and use this in rc.conf


 interfaces=3D"lo0 bge0"

  cloned_interfaces=3D"lo1"

ifconfig_re0=3D"inet <PUBL_IP>  netmask 255.255.255.128 -rxcsum -txcsum"

ifconfig_re0_alias0=3D"inet <PUBL_IP_2> netmask 255.255.255.128"

 ifconfig_lo1=3D"inet 10.0.1.1 netmask 255.255.255.0"

ifconfig_lo1_alias0=3D"inet 10.0.1.2/24"

ifconfig_lo1_alias1=3D"inet 10.0.1.3/32"



On Tue, Nov 17, 2009 at 1:00 PM, <freebsd-jail-request@freebsd.org> wrote:

> Send freebsd-jail mailing list submissions to
>        freebsd-jail@freebsd.org
>
> To subscribe or unsubscribe via the World Wide Web, visit
>        http://lists.freebsd.org/mailman/listinfo/freebsd-jail
> or, via email, send a message with subject or body 'help' to
>        freebsd-jail-request@freebsd.org
>
> You can reach the person managing the list at
>        freebsd-jail-owner@freebsd.org
>
> When replying, please edit your Subject line so it is more specific
> than "Re: Contents of freebsd-jail digest..."
>
>
> Today's Topics:
>
>   1. Re: Broadcast under Jail problems (Vagif Zeynalov)
>   2. Networking from jail (Scheithauer, Lars (FH))
>   3. Networking from jail - errata (Scheithauer, Lars (FH))
>   4. Re: Networking from jail - errata (Bjoern A. Zeeb)
>   5. AW: Networking from jail - errata (Scheithauer, Lars (FH))
>   6. Re: AW: Networking from jail - errata (Bjoern A. Zeeb)
>   7. AW: AW: Networking from jail - errata (Scheithauer, Lars (FH))
>
>
> ----------------------------------------------------------------------
>
> Message: 1
> Date: Mon, 16 Nov 2009 16:14:59 +0300
> From: "Vagif Zeynalov" <vagif@zeynalov.com>
> Subject: Re: Broadcast under Jail problems
> To: "Bjoern A. Zeeb" <bzeeb-lists@lists.zabbadoz.net>
> Cc: freebsd-jail@freebsd.org
> Message-ID: <A9332ADE8F494076A02DAFF06DAADA16@vagifPC>
> Content-Type: text/plain; format=3Dflowed; charset=3D"iso-8859-1";
>        reply-type=3Dresponse
>
>
> >> ...I can provide more details if it will be necessary...
> >
> > error ogs from the application would be interesting to see which
> > (sys)call return which error so that we can narrow it down.
> >
>
> You know, to make the answer I just rebuild the mediatomb on the clear ja=
il
> machine and... the problem has been disappeared!
> It's very strange, because I already did it before few times.
>
> Whatever, sorry guys for disturb. ;-))
> I have to investigate, what did I change at last night in the system.
>
> Regards,
> Vagif
>
>
>
> ------------------------------
>
> Message: 2
> Date: Tue, 17 Nov 2009 10:18:59 +0100
> From: "Scheithauer, Lars (FH)" <Lars.Scheithauer@fh-heidelberg.de>
> Subject: Networking from jail
> To: <freebsd-jail@freebsd.org>
> Message-ID:
>        <
> 26040005B7F3AA41A0345BCE386CA09701C62A79@FHCLUSRV-EX.dcs.fh-heidelberg.de=
>
>
> Content-Type: text/plain;       charset=3D"us-ascii"
>
> Hi everyone!
>
> I'm having a little trouble with my jail's networking and I'm not sure
> what to make of it.
>
> My jailhost has an IP of x.y.z.48, my test jail is x.y.z.49. The
> jailhost has both IP-adresses, the jail has just it's own:
>
> Jail# ifconfig
> bce0: flags=3D8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu
> 1500
>
> options=3D1bb<RXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING,JUMBO_MTU,VLAN_HWCSUM=
,
> TSO4>
>        ether xx:xx:xx:xx:xx:10
>        inet x.y.z.60 netmask 0xffffffc0 broadcast x.y.z.63
>        media: Ethernet autoselect (1000baseSX <full-duplex>)
>        status: active
> [...]
> Host# ifconfig
> bce0: flags=3D8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu
> 1500
>
> options=3D1bb<RXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING,JUMBO_MTU,VLAN_HWCSUM=
,
> TSO4>
>        ether xx:xx:xx:xx:xx:10
>        inet x.y.z.61 netmask 0xffffffc0 broadcast x.y.z.63
>        inet x.y.z.60 netmask 0xffffffc0 broadcast x.y.z.63
>        media: Ethernet autoselect (1000baseSX <full-duplex>)
>        status: active
> [...]
>
> I am able to access the ssh-server running on the jail, and I am able to
> access the proxyserver of our network via telnet and get some pages of
> the internet. However, if I want to install something from the ports,
> the jail is unable to fetch it:
>
> Jail# cd /usr/ports/ftp/wget
> Jail# make
> =3D=3D=3D>  Vulnerability check disabled, database not found
> =3D=3D=3D>  Found saved configuration for wget-1.11.4_1
> =3D> wget-1.11.4.tar.bz2 doesn't seem to exist in /usr/ports/distfiles/.
> =3D> Attempting to fetch from http://ftp.gnu.org/gnu/wget/.
> fetch: http://ftp.gnu.org/gnu/wget/wget-1.11.4.tar.bz2: Operation timed
> out
> =3D> Attempting to fetch from ftp://ftp.gnu.org/gnu/wget/.
> [...]
>
> I've set the appropriate environment variables HTTP_PROXY, HTTPS_PROXY
> and FTP_PROXY. If I test the connection with netcat, I get the following
> error message:
> # nc -zvw 1 -x 'proxy.example.com:8080' www.freebsd.org 80
> nc: read failed (0/3): Broken pipe
>
> The funny thing is, that I have no problem installing ports from the
> Host-system. From what I can tell, all the config files are correct:
>
> Jail# cat /etc/rc.conf
> sshd_enable=3D"YES"
> ifconfig_bce0=3D"inet x.y.z.60 netmask 255.255.255.192"
> defaultrouter=3D"x.y.z.62"
> hostname=3D"jail.example.com"
>
> Host# cat /etc/rc.conf
> sshd_enable=3D"NO"
> ifconfig_bce0=3D"inet x.y.z.61 netmask 255.255.255.192"
> defaultrouter=3D"x.y.z.62"
> hostname=3D"host.example.com"
> ipv6_enable=3D"NO"
> jail_enable=3D"YES"
> jail_set_hostname_allow=3D"NO"
> jail_list=3D"jail"
> jail_jail_hostname=3D"jail"
> jail_jail_ip=3D"x.y.z.60" jail_jail_rootdir=3D"my/jail/root"
> jail_jail_devfs_enable=3D"YES"
>
> Any ideas?
>
> Best Regards,
> Lars
>
>
> ------------------------------
>
> Message: 3
> Date: Tue, 17 Nov 2009 10:48:59 +0100
> From: "Scheithauer, Lars (FH)" <Lars.Scheithauer@fh-heidelberg.de>
> Subject: Networking from jail - errata
> To: <freebsd-jail@freebsd.org>
> Message-ID:
>        <
> 26040005B7F3AA41A0345BCE386CA09701C62A7A@FHCLUSRV-EX.dcs.fh-heidelberg.de=
>
>
> Content-Type: text/plain;       charset=3D"iso-8859-1"
>
> Quick note:
> Forgot to replace two values.
> Jail - x.y.z.61
> Host - x.y.z.60
> Router - x.y.z.62
>
>
> -----Urspr=FCngliche Nachricht-----
> Von: owner-freebsd-jail@freebsd.org [mailto:owner-freebsd-jail@freebsd.or=
g]
> Im Auftrag von Scheithauer, Lars (FH)
> Gesendet: Dienstag, 17. November 2009 10:19
> An: freebsd-jail@freebsd.org
> Betreff: Networking from jail
>
> Hi everyone!
>
> I'm having a little trouble with my jail's networking and I'm not sure
> what to make of it.
>
> My jailhost has an IP of x.y.z.48, my test jail is x.y.z.49. The
> jailhost has both IP-adresses, the jail has just it's own:
>
> Jail# ifconfig
> bce0: flags=3D8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu
> 1500
>
> options=3D1bb<RXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING,JUMBO_MTU,VLAN_HWCSUM=
,
> TSO4>
>        ether xx:xx:xx:xx:xx:10
>        inet x.y.z.60 netmask 0xffffffc0 broadcast x.y.z.63
>        media: Ethernet autoselect (1000baseSX <full-duplex>)
>        status: active
> [...]
> Host# ifconfig
> bce0: flags=3D8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu
> 1500
>
> options=3D1bb<RXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING,JUMBO_MTU,VLAN_HWCSUM=
,
> TSO4>
>        ether xx:xx:xx:xx:xx:10
>        inet x.y.z.61 netmask 0xffffffc0 broadcast x.y.z.63
>        inet x.y.z.60 netmask 0xffffffc0 broadcast x.y.z.63
>        media: Ethernet autoselect (1000baseSX <full-duplex>)
>        status: active
> [...]
>
> I am able to access the ssh-server running on the jail, and I am able to
> access the proxyserver of our network via telnet and get some pages of
> the internet. However, if I want to install something from the ports,
> the jail is unable to fetch it:
>
> Jail# cd /usr/ports/ftp/wget
> Jail# make
> =3D=3D=3D>  Vulnerability check disabled, database not found
> =3D=3D=3D>  Found saved configuration for wget-1.11.4_1
> =3D> wget-1.11.4.tar.bz2 doesn't seem to exist in /usr/ports/distfiles/.
> =3D> Attempting to fetch from http://ftp.gnu.org/gnu/wget/.
> fetch: http://ftp.gnu.org/gnu/wget/wget-1.11.4.tar.bz2: Operation timed
> out
> =3D> Attempting to fetch from ftp://ftp.gnu.org/gnu/wget/.
> [...]
>
> I've set the appropriate environment variables HTTP_PROXY, HTTPS_PROXY
> and FTP_PROXY. If I test the connection with netcat, I get the following
> error message:
> # nc -zvw 1 -x 'proxy.example.com:8080' www.freebsd.org 80
> nc: read failed (0/3): Broken pipe
>
> The funny thing is, that I have no problem installing ports from the
> Host-system. From what I can tell, all the config files are correct:
>
> Jail# cat /etc/rc.conf
> sshd_enable=3D"YES"
> ifconfig_bce0=3D"inet x.y.z.60 netmask 255.255.255.192"
> defaultrouter=3D"x.y.z.62"
> hostname=3D"jail.example.com"
>
> Host# cat /etc/rc.conf
> sshd_enable=3D"NO"
> ifconfig_bce0=3D"inet x.y.z.61 netmask 255.255.255.192"
> defaultrouter=3D"x.y.z.62"
> hostname=3D"host.example.com"
> ipv6_enable=3D"NO"
> jail_enable=3D"YES"
> jail_set_hostname_allow=3D"NO"
> jail_list=3D"jail"
> jail_jail_hostname=3D"jail"
> jail_jail_ip=3D"x.y.z.60"
> jail_jail_rootdir=3D"my/jail/root"
> jail_jail_devfs_enable=3D"YES"
>
> Any ideas?
>
> Best Regards,
> Lars
> _______________________________________________
> freebsd-jail@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-jail
> To unsubscribe, send any mail to "freebsd-jail-unsubscribe@freebsd.org"
>
>
> ------------------------------
>
> Message: 4
> Date: Tue, 17 Nov 2009 10:40:54 +0000 (UTC)
> From: "Bjoern A. Zeeb" <bzeeb-lists@lists.zabbadoz.net>
> Subject: Re: Networking from jail - errata
> To: "Scheithauer, Lars (FH)" <Lars.Scheithauer@fh-heidelberg.de>
> Cc: freebsd-jail@freebsd.org
> Message-ID: <20091117103601.G37440@maildrop.int.zabbadoz.net>
> Content-Type: text/plain; charset=3D"iso-8859-1"
>
> On Tue, 17 Nov 2009, Scheithauer, Lars (FH) wrote:
>
> Hi,
>
> > Quick note:
> > Forgot to replace two values.
> > Jail - x.y.z.61
> > Host - x.y.z.60
> > Router - x.y.z.62
> >
> >
> > -----Urspr=FCngliche Nachricht-----
> > Von: owner-freebsd-jail@freebsd.org [mailto:
> owner-freebsd-jail@freebsd.org] Im Auftrag von Scheithauer, Lars (FH)
> > Gesendet: Dienstag, 17. November 2009 10:19
> > An: freebsd-jail@freebsd.org
> > Betreff: Networking from jail
> >
> > Hi everyone!
> >
> > I'm having a little trouble with my jail's networking and I'm not sure
> > what to make of it.
> >
> > My jailhost has an IP of x.y.z.48, my test jail is x.y.z.49. The
> > jailhost has both IP-adresses, the jail has just it's own:
> >
> > Jail# ifconfig
> > bce0: flags=3D8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu
> > 1500
> >
> > options=3D1bb<RXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING,JUMBO_MTU,VLAN_HWCS=
UM,
> > TSO4>
> >        ether xx:xx:xx:xx:xx:10
> >        inet x.y.z.60 netmask 0xffffffc0 broadcast x.y.z.63
> >        media: Ethernet autoselect (1000baseSX <full-duplex>)
> >        status: active
> > [...]
> > Host# ifconfig
> > bce0: flags=3D8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu
> > 1500
> >
> > options=3D1bb<RXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING,JUMBO_MTU,VLAN_HWCS=
UM,
> > TSO4>
> >        ether xx:xx:xx:xx:xx:10
> >        inet x.y.z.61 netmask 0xffffffc0 broadcast x.y.z.63
> >        inet x.y.z.60 netmask 0xffffffc0 broadcast x.y.z.63
> >        media: Ethernet autoselect (1000baseSX <full-duplex>)
> >        status: active
> > [...]
> >
> > I am able to access the ssh-server running on the jail, and I am able t=
o
> > access the proxyserver of our network via telnet and get some pages of
> > the internet. However, if I want to install something from the ports,
> > the jail is unable to fetch it:
> >
> > Jail# cd /usr/ports/ftp/wget
> > Jail# make
> > =3D=3D=3D>  Vulnerability check disabled, database not found
> > =3D=3D=3D>  Found saved configuration for wget-1.11.4_1
> > =3D> wget-1.11.4.tar.bz2 doesn't seem to exist in /usr/ports/distfiles/=
.
> > =3D> Attempting to fetch from http://ftp.gnu.org/gnu/wget/.
> > fetch: http://ftp.gnu.org/gnu/wget/wget-1.11.4.tar.bz2: Operation timed
> > out
> > =3D> Attempting to fetch from ftp://ftp.gnu.org/gnu/wget/.
> > [...]
> >
> > I've set the appropriate environment variables HTTP_PROXY, HTTPS_PROXY
> > and FTP_PROXY. If I test the connection with netcat, I get the followin=
g
> > error message:
> > # nc -zvw 1 -x 'proxy.example.com:8080' www.freebsd.org 80
> > nc: read failed (0/3): Broken pipe
>
> The usual thing I am interested at that point is - does name
> resolution work properly from within the jail?  /etc/resolv.conf setup
> correctly etc?
>
>
>
> > The funny thing is, that I have no problem installing ports from the
> > Host-system. From what I can tell, all the config files are correct:
> >
> > Jail# cat /etc/rc.conf
> > sshd_enable=3D"YES"
> > ifconfig_bce0=3D"inet x.y.z.60 netmask 255.255.255.192"
> > defaultrouter=3D"x.y.z.62"
> > hostname=3D"jail.example.com"
>
> That's not going to work, really (the ifconfig, defaultrouter, and
> unless you changed the defaults on the host system not even the
> hostname).  You should actually remove those.
>
>
> > Host# cat /etc/rc.conf
> > sshd_enable=3D"NO"
> > ifconfig_bce0=3D"inet x.y.z.61 netmask 255.255.255.192"
> > defaultrouter=3D"x.y.z.62"
> > hostname=3D"host.example.com"
> > ipv6_enable=3D"NO"
> > jail_enable=3D"YES"
> > jail_set_hostname_allow=3D"NO"
> > jail_list=3D"jail"
> > jail_jail_hostname=3D"jail"
> > jail_jail_ip=3D"x.y.z.60"
> > jail_jail_rootdir=3D"my/jail/root"
> > jail_jail_devfs_enable=3D"YES"
>
> That doesn't really match your ifconfig output from above; something
> on the host system would have to set the IP address of the host. I
> would expect something like (you may have mixed jail and host
> addresses so properly sort this):
>
> # host system IP address
> ifconfig_bce0=3Dinet x.y.z.61 netmask 255.255.255.192"
> # jail IP address
> ifconfig_bce0_alias0=3Dinet x.y.z.60 netmask 255.255.255.255"
>
> Note that the alias has a /32 netmask.
>
>
> /bz
>
> --
> Bjoern A. Zeeb         It will not break if you know what you are doing.
>
> ------------------------------
>
> Message: 5
> Date: Tue, 17 Nov 2009 12:18:40 +0100
> From: "Scheithauer, Lars (FH)" <Lars.Scheithauer@fh-heidelberg.de>
> Subject: AW: Networking from jail - errata
> To: <freebsd-jail@freebsd.org>
> Cc: "Bjoern A. Zeeb" <bzeeb-lists@lists.zabbadoz.net>
> Message-ID:
>        <
> 26040005B7F3AA41A0345BCE386CA09701C62A7D@FHCLUSRV-EX.dcs.fh-heidelberg.de=
>
>
> Content-Type: text/plain;       charset=3D"iso-8859-1"
>
> Hi Bjoern,
>
> thanks for the clarification, I changed the values according to your
> suggestions. However, it did not resolve the problem.
>
> I've checked the proxy logfiles and it seems, that the Makefile(s) don't
> try to access the proxy at all while fetching files. Is there any reason,
> why the Makefile(s) should not use the *_PROXY-variables on the jails?
>
> Best Regards,
> Lars
>
>
>
> -----Urspr=FCngliche Nachricht-----
> Von: owner-freebsd-jail@freebsd.org [mailto:owner-freebsd-jail@freebsd.or=
g]
> Im Auftrag von Bjoern A. Zeeb
> Gesendet: Dienstag, 17. November 2009 11:41
> An: Scheithauer, Lars (FH)
> Cc: freebsd-jail@freebsd.org
> Betreff: Re: Networking from jail - errata
>
> On Tue, 17 Nov 2009, Scheithauer, Lars (FH) wrote:
>
> Hi,
>
> > Quick note:
> > Forgot to replace two values.
> > Jail - x.y.z.61
> > Host - x.y.z.60
> > Router - x.y.z.62
> >
> >
> > -----Urspr=FCngliche Nachricht-----
> > Von: owner-freebsd-jail@freebsd.org [mailto:
> owner-freebsd-jail@freebsd.org] Im Auftrag von Scheithauer, Lars (FH)
> > Gesendet: Dienstag, 17. November 2009 10:19
> > An: freebsd-jail@freebsd.org
> > Betreff: Networking from jail
> >
> > Hi everyone!
> >
> > I'm having a little trouble with my jail's networking and I'm not sure
> > what to make of it.
> >
> > My jailhost has an IP of x.y.z.48, my test jail is x.y.z.49. The
> > jailhost has both IP-adresses, the jail has just it's own:
> >
> > Jail# ifconfig
> > bce0: flags=3D8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu
> > 1500
> >
> > options=3D1bb<RXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING,JUMBO_MTU,VLAN_HWCS=
UM,
> > TSO4>
> >        ether xx:xx:xx:xx:xx:10
> >        inet x.y.z.60 netmask 0xffffffc0 broadcast x.y.z.63
> >        media: Ethernet autoselect (1000baseSX <full-duplex>)
> >        status: active
> > [...]
> > Host# ifconfig
> > bce0: flags=3D8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu
> > 1500
> >
> > options=3D1bb<RXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING,JUMBO_MTU,VLAN_HWCS=
UM,
> > TSO4>
> >        ether xx:xx:xx:xx:xx:10
> >        inet x.y.z.61 netmask 0xffffffc0 broadcast x.y.z.63
> >        inet x.y.z.60 netmask 0xffffffc0 broadcast x.y.z.63
> >        media: Ethernet autoselect (1000baseSX <full-duplex>)
> >        status: active
> > [...]
> >
> > I am able to access the ssh-server running on the jail, and I am able t=
o
> > access the proxyserver of our network via telnet and get some pages of
> > the internet. However, if I want to install something from the ports,
> > the jail is unable to fetch it:
> >
> > Jail# cd /usr/ports/ftp/wget
> > Jail# make
> > =3D=3D=3D>  Vulnerability check disabled, database not found
> > =3D=3D=3D>  Found saved configuration for wget-1.11.4_1
> > =3D> wget-1.11.4.tar.bz2 doesn't seem to exist in /usr/ports/distfiles/=
.
> > =3D> Attempting to fetch from http://ftp.gnu.org/gnu/wget/.
> > fetch: http://ftp.gnu.org/gnu/wget/wget-1.11.4.tar.bz2: Operation timed
> > out
> > =3D> Attempting to fetch from ftp://ftp.gnu.org/gnu/wget/.
> > [...]
> >
> > I've set the appropriate environment variables HTTP_PROXY, HTTPS_PROXY
> > and FTP_PROXY. If I test the connection with netcat, I get the followin=
g
> > error message:
> > # nc -zvw 1 -x 'proxy.example.com:8080' www.freebsd.org 80
> > nc: read failed (0/3): Broken pipe
>
> The usual thing I am interested at that point is - does name
> resolution work properly from within the jail?  /etc/resolv.conf setup
> correctly etc?
>
>
>
> > The funny thing is, that I have no problem installing ports from the
> > Host-system. From what I can tell, all the config files are correct:
> >
> > Jail# cat /etc/rc.conf
> > sshd_enable=3D"YES"
> > ifconfig_bce0=3D"inet x.y.z.60 netmask 255.255.255.192"
> > defaultrouter=3D"x.y.z.62"
> > hostname=3D"jail.example.com"
>
> That's not going to work, really (the ifconfig, defaultrouter, and
> unless you changed the defaults on the host system not even the
> hostname).  You should actually remove those.
>
>
> > Host# cat /etc/rc.conf
> > sshd_enable=3D"NO"
> > ifconfig_bce0=3D"inet x.y.z.61 netmask 255.255.255.192"
> > defaultrouter=3D"x.y.z.62"
> > hostname=3D"host.example.com"
> > ipv6_enable=3D"NO"
> > jail_enable=3D"YES"
> > jail_set_hostname_allow=3D"NO"
> > jail_list=3D"jail"
> > jail_jail_hostname=3D"jail"
> > jail_jail_ip=3D"x.y.z.60"
> > jail_jail_rootdir=3D"my/jail/root"
> > jail_jail_devfs_enable=3D"YES"
>
> That doesn't really match your ifconfig output from above; something
> on the host system would have to set the IP address of the host. I
> would expect something like (you may have mixed jail and host
> addresses so properly sort this):
>
> # host system IP address
> ifconfig_bce0=3Dinet x.y.z.61 netmask 255.255.255.192"
> # jail IP address
> ifconfig_bce0_alias0=3Dinet x.y.z.60 netmask 255.255.255.255"
>
> Note that the alias has a /32 netmask.
>
>
> /bz
>
> --
> Bjoern A. Zeeb         It will not break if you know what you are doing.
>
>
> ------------------------------
>
> Message: 6
> Date: Tue, 17 Nov 2009 11:27:40 +0000 (UTC)
> From: "Bjoern A. Zeeb" <bzeeb-lists@lists.zabbadoz.net>
> Subject: Re: AW: Networking from jail - errata
> To: "Scheithauer, Lars (FH)" <Lars.Scheithauer@fh-heidelberg.de>
> Cc: freebsd-jail@freebsd.org
> Message-ID: <20091117112535.L37440@maildrop.int.zabbadoz.net>
> Content-Type: TEXT/PLAIN; charset=3DUS-ASCII; format=3Dflowed
>
> On Tue, 17 Nov 2009, Scheithauer, Lars (FH) wrote:
>
> Hi,
>
> > thanks for the clarification, I changed the values according to your
> suggestions. However, it did not resolve the problem.
>
> Did you aslo check resolv.conf inside the jail?
> Does host www.freebsd.org work?
>
>
> > I've checked the proxy logfiles and it seems, that the Makefile(s) don'=
t
> try to access the proxy at all while fetching files. Is there any reason,
> why the Makefile(s) should not use the *_PROXY-variables on the jails?
>
> I assume the proxy is squid and that the proxy itself works?
> What if you set the http_proxy variables to an IP address rather than
> the name (don't use 127.0.0.1 as address, just to rule that out as
> well).
>
> /bz
>
> --
> Bjoern A. Zeeb         It will not break if you know what you are doing.
>
>
> ------------------------------
>
> Message: 7
> Date: Tue, 17 Nov 2009 12:40:51 +0100
> From: "Scheithauer, Lars (FH)" <Lars.Scheithauer@fh-heidelberg.de>
> Subject: AW: AW: Networking from jail - errata
> To: "Bjoern A. Zeeb" <bzeeb-lists@lists.zabbadoz.net>
> Cc: freebsd-jail@freebsd.org
> Message-ID:
>        <
> 26040005B7F3AA41A0345BCE386CA09701C62A80@FHCLUSRV-EX.dcs.fh-heidelberg.de=
>
>
> Content-Type: text/plain;       charset=3D"iso-8859-1"
>
> Hi Bjoern,
>
> I did, but the error was somewhere else. I set the proxy through
>        set http_proxy=3D"http://proxy.example.com:8080"
> while the correct version would be
>        setenv http_proxy http://proxy.example.com:8080
>
> In both cases, "echo $http_proxy" returns the correct entry. Could you
> explain the difference between set and setenv?
>
> Best Regards,
> Lars
>
>
>
> -----Urspr=FCngliche Nachricht-----
> Von: Bjoern A. Zeeb [mailto:bzeeb-lists@lists.zabbadoz.net]
> Gesendet: Dienstag, 17. November 2009 12:28
> An: Scheithauer, Lars (FH)
> Cc: freebsd-jail@freebsd.org
> Betreff: Re: AW: Networking from jail - errata
>
> On Tue, 17 Nov 2009, Scheithauer, Lars (FH) wrote:
>
> Hi,
>
> > thanks for the clarification, I changed the values according to your
> suggestions. However, it did not resolve the problem.
>
> Did you aslo check resolv.conf inside the jail?
> Does host www.freebsd.org work?
>
>
> > I've checked the proxy logfiles and it seems, that the Makefile(s) don'=
t
> try to access the proxy at all while fetching files. Is there any reason,
> why the Makefile(s) should not use the *_PROXY-variables on the jails?
>
> I assume the proxy is squid and that the proxy itself works?
> What if you set the http_proxy variables to an IP address rather than
> the name (don't use 127.0.0.1 as address, just to rule that out as
> well).
>
> /bz
>
> --
> Bjoern A. Zeeb         It will not break if you know what you are doing.
>
>
> ------------------------------
>
> _______________________________________________
> freebsd-jail@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-jail
> To unsubscribe, send any mail to "freebsd-jail-unsubscribe@freebsd.org"
>
>
> End of freebsd-jail Digest, Vol 120, Issue 2
> ********************************************
>



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?4c7a12550911180533y6bed77f5m222725c6a3ca87be>