From owner-freebsd-isp  Thu May  9  8:54:58 2002
Delivered-To: freebsd-isp@freebsd.org
Received: from misery.sdf.com (misery.sdf.com [207.200.153.226])
	by hub.freebsd.org (Postfix) with ESMTP id F139C37B407
	for <freebsd-isp@freebsd.org>; Thu,  9 May 2002 08:54:47 -0700 (PDT)
Received: from tom (helo=localhost)
	by misery.sdf.com with local-esmtp (Exim 2.12 #1)
	id 175pPp-00008N-00; Thu, 9 May 2002 08:01:09 -0700
Date: Thu, 9 May 2002 08:01:07 -0700 (PDT)
From: Tom Samplonius <tom@sdf.com>
To: Francis Vidal <francisv@dagupan.com>
Cc: freebsd-isp@FreeBSD.ORG
Subject: Re: Web hosting and jail
In-Reply-To: <008e01c1f72c$bfd05dd0$01a25bca@pran>
Message-ID: <Pine.BSF.4.05.10205090800490.6896-100000@misery.sdf.com>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-freebsd-isp@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-isp.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-isp>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-isp>
X-Loop: FreeBSD.org


  You can run ipfw on the same machine as your jails.

Tom

On Thu, 9 May 2002, Francis Vidal wrote:

> Which means that I have to put them behind a firewall that will do this?
> 
> ----- Original Message -----
> From: "Tom Samplonius" <tom@sdf.com>
> To: <francisv@dagupan.com>
> Cc: <freebsd-isp@FreeBSD.ORG>
> Sent: Wednesday, May 08, 2002 11:37 PM
> Subject: RE: Web hosting and jail
> 
> 
> >
> >   You can do both with ipfw.  You can create a "count" rule for each jail
> > IP.
> >
> > Tom
> >
> > On Wed, 8 May 2002 francisv@dagupan.com wrote:
> >
> > > I can probably do suggestion no. 1 on the router. Can you suggest tools
> that
> > > will do no. 2?
> > >
> > > -----Original Message-----
> > > From: Tom Samplonius [mailto:tom@sdf.com]
> > > Sent: Wednesday, May 08, 2002 1:40 PM
> > > To: francisv@dagupan.com
> > > Cc: freebsd-isp@FreeBSD.ORG
> > > Subject: Re: Web hosting and jail
> > >
> > > 1.  Use filters to make sure clients are just web hosting.
> > >
> > > 2.  Monitor traffic to and from the jails IP, and use it for billing, so
> > > it won't matter what your clients do.
> > >
> > > Tom
> > >
> > > On Wed, 8 May 2002 francisv@dagupan.com wrote:
> > >
> > > > Hi,
> > > >
> > > > We are starting to offer web hosting solution using FreeBSD's jail
> > > facility.
> > > > However, I discovered that some of our clients are installing
> proxy/cache
> > > > services like Squid to use our bandwidth to their advantage. Now, I'm
> > > > starting their jail processes with a nice value of 10 but how do you
> > > > discourage them NOT to run proxy/cache services inside the jail
> > > environment
> > > > besides telling them not to?
> > > >
> > > > BTW, is there a FreeBSD-specific list for web hosting solutions?
> > > >
> > > > Thanks in advance!
> 
> 
> 
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-isp" in the body of the message
> 
> 


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message