From owner-freebsd-questions@FreeBSD.ORG Tue Jul 8 17:09:41 2008 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 24F641065675 for ; Tue, 8 Jul 2008 17:09:41 +0000 (UTC) (envelope-from chris@smartt.com) Received: from nov.smartt.com (nov.smartt.com [69.31.173.253]) by mx1.freebsd.org (Postfix) with ESMTP id F07038FC14 for ; Tue, 8 Jul 2008 17:09:40 +0000 (UTC) (envelope-from chris@smartt.com) Received: from [69.31.174.220] ([69.31.174.220]) (authenticated bits=0) by nov.smartt.com (8.13.8/8.13.5) with ESMTP id m68H9aoj030062; Tue, 8 Jul 2008 10:09:36 -0700 Message-ID: <48739F58.8070507@smartt.com> Date: Tue, 08 Jul 2008 10:09:44 -0700 From: Chris St Denis User-Agent: Thunderbird 2.0.0.14 (Windows/20080421) MIME-Version: 1.0 To: Daniel Gerzo References: <2daa8b4e0807070951u607ff031v98b5b96103fdab4@mail.gmail.com> <200807081124.33377.fbsd.questions@rachie.is-a-geek.net> <2daa8b4e0807080903o609d6b7ag831845b7939c20c8@mail.gmail.com> <4873973D.1080402@infracaninophile.co.uk> <5587447de8c610cd6e2a0a3ee7685f8d@78.47.53.106> In-Reply-To: <5587447de8c610cd6e2a0a3ee7685f8d@78.47.53.106> X-Spam-Status: No, score=-3.8 required=5.0 tests=ALL_TRUSTED,AWL,BAYES_00, HTML_40_50,HTML_MESSAGE autolearn=ham version=3.1.8 X-Spam-Checker-Version: SpamAssassin 3.1.8 (2007-02-13) on nov.smartt.com Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 7bit X-Content-Filtered-By: Mailman/MimeDel 2.1.5 Cc: Mel , David Allen , freebsd-questions@freebsd.org Subject: Re: Jails and IP Aliasing X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 08 Jul 2008 17:09:41 -0000 Daniel Gerzo wrote: > Hello, > > >> * Something like a loopback address inside the jail. It may be >> 127.0.0.2 instead of 127.0.0.1 but most software can be persuaded >> to use it for loopback style things. >> >> * The ability to map several IPs onto the jailed system by use of >> NAT and redirect within firewall rules >> >> * The ability to have a jail with /no/ external IP for when the >> paranoia becomes unbearable[*]. >> > > Most of this is actually implemented by bz@. You can find some patches > at http://sources.zabbadoz.net/freebsd/jail.html > These patches (in various forms) have been around since version 4.x. Why has none of this functionality ever been committed to head?