From owner-freebsd-stable@FreeBSD.ORG  Thu Oct  2 10:05:12 2014
Return-Path: <owner-freebsd-stable@FreeBSD.ORG>
Delivered-To: freebsd-stable@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org
 [IPv6:2001:1900:2254:206a::19:1])
 (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits))
 (No client certificate requested)
 by hub.freebsd.org (Postfix) with ESMTPS id 8F278F4F;
 Thu,  2 Oct 2014 10:05:12 +0000 (UTC)
Received: from alogt.com (alogt.com [69.36.191.58])
 (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
 (Client did not present a certificate)
 by mx1.freebsd.org (Postfix) with ESMTPS id 6B8688C9;
 Thu,  2 Oct 2014 10:05:12 +0000 (UTC)
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=alogt.com;
 s=default; 
 h=Content-Transfer-Encoding:Content-Type:MIME-Version:Message-ID:Subject:Cc:To:From:Date;
 bh=Qunn3oJchJW/8dMRRNBHwK3VAM2pkJSqVvd8fHI0D6U=; 
 b=u0YJ1L5YYGxbZ/WuVkJQP8tgVZUu6Bn2EkzxamT04MqrIWve+ruq5pHAR1Ysu8pDNk/BmzWEa6HPgoUDu+wfPKXWNCwkNMUGRheofKQs6zgmi1Pps/AFSG8VRrtpALAiPTsTHfkvatL/VqOIjxkfuCCYH62VIYYX3OwWzHcPMBs=;
Received: from [182.4.74.116] (port=56086 helo=X220.alogt.com)
 by sl-508-2.slc.westdc.net with esmtpsa (SSLv3:AES128-SHA:128)
 (Exim 4.82) (envelope-from <erichsfreebsdlist@alogt.com>)
 id 1XZdG3-001FzD-2b; Thu, 02 Oct 2014 04:05:11 -0600
Date: Thu, 2 Oct 2014 18:05:06 +0800
From: Erich Dollansky <erichsfreebsdlist@alogt.com>
To: freebsd-jail@freebsd.org
Subject: no network connection from inside a jail
Message-ID: <20141002180506.4965760b@X220.alogt.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit
X-AntiAbuse: This header was added to track abuse,
 please include it with any abuse report
X-AntiAbuse: Primary Hostname - sl-508-2.slc.westdc.net
X-AntiAbuse: Original Domain - freebsd.org
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - alogt.com
X-Get-Message-Sender-Via: sl-508-2.slc.westdc.net: authenticated_id:
 erichsfreebsdlist@alogt.com
X-Source: 
X-Source-Args: 
X-Source-Dir: 
Cc: freebsd-stable@freebsd.org
X-BeenThere: freebsd-stable@freebsd.org
X-Mailman-Version: 2.1.18-1
Precedence: list
List-Id: Production branch of FreeBSD source code <freebsd-stable.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/options/freebsd-stable>,
 <mailto:freebsd-stable-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-stable/>
List-Post: <mailto:freebsd-stable@freebsd.org>
List-Help: <mailto:freebsd-stable-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-stable>,
 <mailto:freebsd-stable-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Thu, 02 Oct 2014 10:05:12 -0000

Hi,

I recently upgraded to 10.1 BETA3 via sources. All seemed to be fine
until I started jails which connect to the Internet. It simply does not
work anymore. When the browser from the jail connects to another jail
on the same machine via HTTP, it all works. Accesses to the ouside of
the machine fails.

Even a ping to a local device does not work.

ping 192.168.yyy.xxx
ping: socket: Operation not permitted

despite having

security.jail.allow_raw_sockets: 1

Just to make sure, I upgraded also the world in all jails without any
difference.

UPDATING did not mention any changes since BETA1.

I feel a bit lost now.

What could have caused the problems?

Erich