From owner-freebsd-hackers@FreeBSD.ORG Thu Mar 22 10:09:09 2007 Return-Path: X-Original-To: freebsd-hackers@freebsd.org Delivered-To: freebsd-hackers@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id 14B9816A416 for ; Thu, 22 Mar 2007 10:09:09 +0000 (UTC) (envelope-from doconnor@gsoft.com.au) Received: from cain.gsoft.com.au (cain.gsoft.com.au [203.31.81.10]) by mx1.freebsd.org (Postfix) with ESMTP id B4E0213C4BC for ; Thu, 22 Mar 2007 10:09:08 +0000 (UTC) (envelope-from doconnor@gsoft.com.au) Received: from inchoate.gsoft.com.au (ppp148-153.lns2.adl2.internode.on.net [121.44.148.153]) (authenticated bits=0) by cain.gsoft.com.au (8.13.8/8.13.8) with ESMTP id l2MA91EB010065 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Thu, 22 Mar 2007 20:39:03 +1030 (CST) (envelope-from doconnor@gsoft.com.au) From: "Daniel O'Connor" To: Julian Elischer Date: Thu, 22 Mar 2007 20:38:51 +1030 User-Agent: KMail/1.9.5 References: <200703221201.35028.doconnor@gsoft.com.au> <4601DF2E.2050705@elischer.org> In-Reply-To: <4601DF2E.2050705@elischer.org> MIME-Version: 1.0 Content-Disposition: inline Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit Message-Id: <200703222038.52732.doconnor@gsoft.com.au> X-Spam-Score: -2.312 () BAYES_00 X-Scanned-By: MIMEDefang 2.58 on 203.31.81.10 Cc: freebsd-hackers@freebsd.org Subject: Re: sendto() giving EPERM outside a jail X-BeenThere: freebsd-hackers@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Technical Discussions relating to FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 22 Mar 2007 10:09:09 -0000 On Thursday 22 March 2007 12:13, Julian Elischer wrote: > > According to my reading of the man page it is not possible to get this > > error unless I'm using jails (which I'm not). The code in question does.. > > you can get it from the firewall too.. Ahah, I guess my firewall rules aren't doing exactly what I though because adding a specific rule to allow the packets worked. Thanks! -- Daniel O'Connor software and network engineer for Genesis Software - http://www.gsoft.com.au "The nice thing about standards is that there are so many of them to choose from." -- Andrew Tanenbaum GPG Fingerprint - 5596 B766 97C0 0E94 4347 295E E593 DC20 7B3F CE8C