From owner-freebsd-hackers@FreeBSD.ORG  Wed May 26 08:09:09 2004
Return-Path: <owner-freebsd-hackers@FreeBSD.ORG>
Delivered-To: freebsd-hackers@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id D021716A4CE
	for <freebsd-hackers@freebsd.org>;
	Wed, 26 May 2004 08:09:09 -0700 (PDT)
Received: from smtp017.mail.yahoo.com (smtp017.mail.yahoo.com
	[216.136.174.114])
	by mx1.FreeBSD.org (Postfix) with SMTP id F375643D41
	for <freebsd-hackers@freebsd.org>;
	Wed, 26 May 2004 08:09:08 -0700 (PDT)
	(envelope-from kaeru@pd.jaring.my)
Received: from unknown (HELO ?219.95.62.229?) (khairil?yusof@219.95.62.229
	with plain)
	by smtp017.mail.yahoo.com with SMTP; 26 May 2004 15:08:32 -0000
From: Khairil Yusof <kaeru@pd.jaring.my>
To: freebsd-hackers@freebsd.org
Content-Type: multipart/signed; micalg=pgp-sha1;
	protocol="application/pgp-signature"; boundary="=-kQdgzrUfJhdPUqVHJDHM"
Message-Id: <1085584107.51323.21.camel@wolverine>
Mime-Version: 1.0
X-Mailer: Ximian Evolution 1.5.7FreeBSD GNOME Team Port 
Date: Wed, 26 May 2004 23:08:28 +0800
Subject: internet access from jail, on host acting as nat gateway
X-BeenThere: freebsd-hackers@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Technical Discussions relating to FreeBSD
	<freebsd-hackers.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-hackers>,
	<mailto:freebsd-hackers-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-hackers>
List-Post: <mailto:freebsd-hackers@freebsd.org>
List-Help: <mailto:freebsd-hackers-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-hackers>,
	<mailto:freebsd-hackers-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Wed, 26 May 2004 15:09:09 -0000


--=-kQdgzrUfJhdPUqVHJDHM
Content-Type: text/plain
Content-Transfer-Encoding: quoted-printable

Asking here, because I got no replies in questions@ :(

I'm having a problem here, where I can't access the internet from inside
my jails. The host and another computer on the lan (fxp0) have no
problems connecting to the internet via natd. I don't have any problems
for connections between the host and jail either.

Is internet access from a jail, for this kind of setup possible?

I do have a divert all rule:
divert 8668 ip from any to any via tun0
=20
and rc.conf is

natd_interface=3D"tun0"
natd_flags=3D"-dynamic yes -s -m"
nfs_reserved_port_only=3D"NO"

--=-kQdgzrUfJhdPUqVHJDHM
Content-Type: application/pgp-signature; name=signature.asc
Content-Description: This is a digitally signed message part

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (FreeBSD)

iD8DBQBAtLLrDAqnLW/+/X8RAj04AKDQdpj5SYdbDXIrhWhRKvz4k1m8TwCg4Gy1
yhW1g8iGRjTOayES41N439g=
=++US
-----END PGP SIGNATURE-----

--=-kQdgzrUfJhdPUqVHJDHM--