From owner-freebsd-questions@FreeBSD.ORG  Tue Oct  4 23:11:05 2005
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
X-Original-To: freebsd-questions@freebsd.org
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id D32A516A41F
	for <freebsd-questions@freebsd.org>;
	Tue,  4 Oct 2005 23:11:05 +0000 (GMT)
	(envelope-from espartano.list@gmail.com)
Received: from xproxy.gmail.com (xproxy.gmail.com [66.249.82.197])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 7432A43D45
	for <freebsd-questions@freebsd.org>;
	Tue,  4 Oct 2005 23:11:05 +0000 (GMT)
	(envelope-from espartano.list@gmail.com)
Received: by xproxy.gmail.com with SMTP id t5so19008wxc
	for <freebsd-questions@freebsd.org>;
	Tue, 04 Oct 2005 16:11:04 -0700 (PDT)
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=beta; d=gmail.com;
	h=received:message-id:date:from:reply-to:to:subject:mime-version:content-type:content-transfer-encoding:content-disposition;
	b=JSSxXm4+F+nEOXa8/C+VZi2jGrGmN987UFb7xj4jN9buVLJJhBiaqDyTGIVjmIMMCX07TOb4y5n2vIgzBRP0johj9LMjY/3w+eX2Ab1ZpEESWHeC2XcvlN6w3RBiQe+WMREAJVrIj5bn/3QS+0To3VAabBl/qcVjX+I696o7Vs4=
Received: by 10.70.100.9 with SMTP id x9mr47382wxb;
	Tue, 04 Oct 2005 16:11:04 -0700 (PDT)
Received: by 10.70.125.20 with HTTP; Tue, 4 Oct 2005 16:11:04 -0700 (PDT)
Message-ID: <9385b1fc0510041611r1d425adp@mail.gmail.com>
Date: Tue, 4 Oct 2005 18:11:04 -0500
From: Tyler T <espartano.list@gmail.com>
To: freebsd-questions@freebsd.org
MIME-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline
Subject: problem with ssh connetions in jail
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
Reply-To: Tyler T <espartano.list@gmail.com>
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 04 Oct 2005 23:11:05 -0000

hi people first sorry for my english.

i have a pc with only one etternet card connected to a router
(172.16.0.1) which provide both internet connection and dhcp service,
in this machine i have configured a jail virtual server, the ip of the
real server is 172.16.1.36/16 and i have made a ip alias for the jail
virtual server which is 172.16.1.100/32, i want that the virtual
server respond all incoming connections from internet, i have
configured natd with next option in /etc/rc.natd:

redirect_port  tcp  172.16.1.100:22   22


in /etc/firewall.rules:

add divert natd all from any to any via rl0


in /etc/rc.conf:

natd_enable=3D"YES"
natd_interface=3D"rl0"
natd_flags=3D"-l -f /etc/rc.natd"

firewall_enable=3D"YES"
firewall_type=3D"/etc/firewall.rules"
firewall_script=3D"/etc/rc.firewall"

in the sshd of jail:

KeepAlive yes
UseDNS no

my firewall is IPFW2, the configuration works well however often the
conections is reset, i don't know what happen

a scheme of my lan:

                             172.16.0.1/16                           =20
    real ip  172.16.1.36/16

INTERNET----------modem/router-------------------------  PC with run jail

                                                                     =20
             alias ip  172.16.1.100/32


any help is thank in avantage.