From owner-freebsd-questions@FreeBSD.ORG Fri Apr 22 21:27:39 2011 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 071571065670 for ; Fri, 22 Apr 2011 21:27:39 +0000 (UTC) (envelope-from michael.ross@gmx.net) Received: from mailout-de.gmx.net (mailout-de.gmx.net [213.165.64.22]) by mx1.freebsd.org (Postfix) with SMTP id 536518FC0A for ; Fri, 22 Apr 2011 21:27:37 +0000 (UTC) Received: (qmail invoked by alias); 22 Apr 2011 21:00:55 -0000 Received: from dslb-178-003-187-025.pools.arcor-ip.net (EHLO michael-think) [178.3.187.25] by mail.gmx.net (mp046) with SMTP; 22 Apr 2011 23:00:55 +0200 X-Authenticated: #11429267 X-Provags-ID: V01U2FsdGVkX19uNdYjUoduPcuHeRm6IIgtP4gEQixoYRVw2Ux34a 6wxKoJrGCorULN Content-Type: text/plain; charset=iso-8859-15; format=flowed; delsp=yes To: freebsd-questions@freebsd.org, xor References: Date: Fri, 22 Apr 2011 23:00:51 +0200 MIME-Version: 1.0 Content-Transfer-Encoding: 7bit From: "Michael Ross" Message-ID: In-Reply-To: User-Agent: Opera Mail/11.10 (Win32) X-Y-GMX-Trusted: 0 Cc: Subject: Re: Jails: How do i limit what ifconfig shows? X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 22 Apr 2011 21:27:39 -0000 Am 22.04.2011, 22:21 Uhr, schrieb xor : > Hullo > First off, thanks for a lovely operating system <3 > > I decided to go for FreeBSD perhaps 3 days ago. Before, ive been an > Debian/OpenBSD guy, and ive only used my obsd box for redundant > firewalls and networking. Ive not been running any services off the > boxen. > > The reason I decided to go for FreeBSD is because of the Jails. Ive > looked around a bit, but I can not find anything about how to limit > what interfaces that ifconfig shows. I would like it to hide pretty > much everything so that _no_ information about the host systems > networking leaks into the jails. I dont want jails to know anything > but their IP-numbers and which computer to use for DNS lookups, > essentially. > > Is there any good text out there that describes how to do this? Ive > searched a bit for it, but Ive been unable to find anything but the > basics. Maybe you can remove the ifconfig binary from the jail. Works for me. Michael