From owner-freebsd-questions@FreeBSD.ORG Wed Aug 11 02:50:32 2010 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id AE8F0106566C for ; Wed, 11 Aug 2010 02:50:32 +0000 (UTC) (envelope-from fbsd8@a1poweruser.com) Received: from mail-03.name-services.com (mail-03.name-services.com [69.64.155.195]) by mx1.freebsd.org (Postfix) with ESMTP id 98B118FC12 for ; Wed, 11 Aug 2010 02:50:32 +0000 (UTC) Received: from [10.0.10.3] ([202.69.173.114]) by mail-03.name-services.com with Microsoft SMTPSVC(6.0.3790.4675); Tue, 10 Aug 2010 19:50:32 -0700 Message-ID: <4C620FF5.1020900@a1poweruser.com> Date: Wed, 11 Aug 2010 10:50:29 +0800 From: Fbsd8 User-Agent: Thunderbird 2.0.0.17 (Windows/20080914) MIME-Version: 1.0 To: "Randal L. Schwartz" References: <268321.67123.qm@web24608.mail.ird.yahoo.com> <4C61E8B1.7050605@a1poweruser.com> <86mxsuynm0.fsf@red.stonehenge.com> <4C620356.6070402@a1poweruser.com> <86fwylzyqd.fsf@red.stonehenge.com> In-Reply-To: <86fwylzyqd.fsf@red.stonehenge.com> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-OriginalArrivalTime: 11 Aug 2010 02:50:33.0040 (UTC) FILETIME=[F7807D00:01CB38FF] X-Sender: fbsd8@a1poweruser.com Cc: freebsd-questions@freebsd.org Subject: Re: How to connect a jail to the web ? X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 11 Aug 2010 02:50:32 -0000 Randal L. Schwartz wrote: >>>>>> "Fbsd8" == Fbsd8 writes: > > Fbsd8> ifconfig alias > > Fbsd8> man 8 ifconfig > > Yup, and using that, I can give a private 10.x address to my jail. > > How do I get it to face the public without a firewall rule? > No. Your jail is assigned it's ip address when you create it. The alias gives the jail network access when you start the jail. Both ip address must match. Just assign the jail your public ip address when you create it. "face the public" is a very large subject, which the answer depends on your hardware configuration, registered domain names and static ip addresses. Using jails requires the host system administrator to be well trained in networks and how public and private networks function. Jail documentation is not going to teach you this.