From owner-freebsd-bugs@FreeBSD.ORG  Sat Jan 17 09:30:22 2004
Return-Path: <owner-freebsd-bugs@FreeBSD.ORG>
Delivered-To: freebsd-bugs@hub.freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 3CA3E16A4CE
	for <freebsd-bugs@hub.freebsd.org>;
	Sat, 17 Jan 2004 09:30:22 -0800 (PST)
Received: from freefall.freebsd.org (freefall.freebsd.org [216.136.204.21])
	by mx1.FreeBSD.org (Postfix) with ESMTP id A776C43D58
	for <freebsd-bugs@hub.freebsd.org>;
	Sat, 17 Jan 2004 09:30:20 -0800 (PST)
	(envelope-from gnats@FreeBSD.org)
Received: from freefall.freebsd.org (gnats@localhost [127.0.0.1])
	i0HHUKFR002445	for <freebsd-bugs@freefall.freebsd.org>;
	Sat, 17 Jan 2004 09:30:20 -0800 (PST)
	(envelope-from gnats@freefall.freebsd.org)
Received: (from gnats@localhost)
	by freefall.freebsd.org (8.12.10/8.12.10/Submit) id i0HHUKBd002443;
	Sat, 17 Jan 2004 09:30:20 -0800 (PST)
	(envelope-from gnats)
Date: Sat, 17 Jan 2004 09:30:20 -0800 (PST)
Message-Id: <200401171730.i0HHUKBd002443@freefall.freebsd.org>
To: freebsd-bugs@FreeBSD.org
From: Pawel Malachowski <pawmal-posting@freebsd.lublin.pl>
Subject: Re: kern/61483: Jail security is not honored using IP Filter
X-BeenThere: freebsd-bugs@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
Reply-To: Pawel Malachowski <pawmal-posting@freebsd.lublin.pl>
List-Id: Bug reports <freebsd-bugs.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-bugs>,
	<mailto:freebsd-bugs-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-bugs>
List-Post: <mailto:freebsd-bugs@freebsd.org>
List-Help: <mailto:freebsd-bugs-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-bugs>,
	<mailto:freebsd-bugs-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Sat, 17 Jan 2004 17:30:22 -0000

The following reply was made to PR kern/61483; it has been noted by GNATS.

From: Pawel Malachowski <pawmal-posting@freebsd.lublin.pl>
To: Andrew Kolchoogin <andrew@rinet.ru>
Cc: FreeBSD-gnats-submit@freebsd.org
Subject: Re: kern/61483: Jail security is not honored using IP Filter
Date: Sat, 17 Jan 2004 18:25:27 +0100

 On Sat, Jan 17, 2004 at 07:52:18PM +0300, Andrew Kolchoogin wrote:
 
 > >How-To-Repeat:
 >     1) Set up any jail:
 > 
 >         mkdir /usr/jail
 >         cd /usr/src
 >         make buildworld
 >         make DESTDIR=/usr/jail installworld
 >         cd etc
 >         make DESTDIR=/usr/jail distribution
 
 Please show /dev content and consult with jail(8).
 
 >     2) Run shell inside jail:
 > 
 >         jail /usr/jail localhost 127.0.0.1 /bin/tcsh
 > 
 >     3) Start 'ipfstat' command:
 > 
 >         ipfstat -io
 > 
 >     And you will see all of your IP filter rules set up outside jail.
 
 
 -- 
 Paweł Małachowski