From owner-freebsd-jail@FreeBSD.ORG Fri Mar 8 07:48:49 2013 Return-Path: Delivered-To: freebsd-jail@FreeBSD.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by hub.freebsd.org (Postfix) with ESMTP id 6753AD66; Fri, 8 Mar 2013 07:48:49 +0000 (UTC) (envelope-from bsam@passap.ru) Received: from forward4h.mail.yandex.net (forward4h.mail.yandex.net [IPv6:2a02:6b8:0:f05::4]) by mx1.freebsd.org (Postfix) with ESMTP id 0E266E63; Fri, 8 Mar 2013 07:48:49 +0000 (UTC) Received: from smtp2h.mail.yandex.net (smtp2h.mail.yandex.net [84.201.187.145]) by forward4h.mail.yandex.net (Yandex) with ESMTP id 65FCB1B221F9; Fri, 8 Mar 2013 11:48:46 +0400 (MSK) Received: from smtp2h.mail.yandex.net (localhost [127.0.0.1]) by smtp2h.mail.yandex.net (Yandex) with ESMTP id EDF76170050D; Fri, 8 Mar 2013 11:48:45 +0400 (MSK) Received: from 93.91.2.200.tel.ru (93.91.2.200.tel.ru [93.91.2.200]) by smtp2h.mail.yandex.net (nwsmtp/Yandex) with ESMTP id mjxesnWs-mjxSg5Mb; Fri, 8 Mar 2013 11:48:45 +0400 Message-ID: <513997DD.7010109@passap.ru> Date: Fri, 08 Mar 2013 11:48:45 +0400 From: Boris Samorodov Organization: =?UTF-8?B?0JfQkNCeICLQktCQ0KDQoiI=?= User-Agent: Mozilla/5.0 (X11; FreeBSD i386; rv:17.0) Gecko/17.0 Thunderbird/17.0 MIME-Version: 1.0 To: Jamie Gritton Subject: =?UTF-8?B?UmU6IElQdjQgYWRkcmVzc2VzIGNsYXNoIC8gamFpbHMgbm90IHdvcms=?= =?UTF-8?B?aW5nIGFmdGVyIHJlYm9vdOKApg==?= References: <55865.68.255.104.38.1362619385.squirrel@cosmo.uchicago.edu> <6C130E1F-6CDC-4328-A300-5B483B8B4940@gmail.com> <513864D5.1070900@passap.ru> <51392119.2090502@FreeBSD.org> In-Reply-To: <51392119.2090502@FreeBSD.org> Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Cc: freebsd-jail@FreeBSD.org X-BeenThere: freebsd-jail@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: "Discussion about FreeBSD jail\(8\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 08 Mar 2013 07:48:49 -0000 08.03.2013 03:22, Jamie Gritton пишет: > You're allowed to have the same address in multiple jails, but only in > the case of jails that have one address (i.e. one IPv4 address in this > case). Jails with multiple IP addresses can't share any of those > addresses with other jails. I don't know why it should work once and > then not work later though. >From JAIL(8): ----- Jails have a set a core parameters, and kernel modules can add their own jail parameters. The current set of available parameters can be retrieved via “sysctl -d security.jail.param”. Any parameters not set will be given default values, often based on the current environment. The core parameters are: [...] ip4.addr [...] It is only possible to start multiple jails with the same IP address, if none of the jails has more than this sin‐ gle overlapping IP address assigned to itself. ----- My interpratation of the mannual page is: this restrict is valid only when ip4.addr sysctl is used. Otherwise this restriction should be documented at other section (say, at DESCRIPTION). -- WBR, Boris Samorodov (bsam) FreeBSD Committer, http://www.FreeBSD.org The Power To Serve