Date: Wed, 29 May 2013 10:06:42 +0800 From: Julian Elischer <julian@freebsd.org> To: Jeff <dejamuse@yahoo.com> Cc: "freebsd-net@freebsd.org" <freebsd-net@freebsd.org> Subject: Re: FreeBSD jail can't talk to internet through multiple routers Message-ID: <51A562B2.4020101@freebsd.org> In-Reply-To: <1369785428.89131.YahooMailNeo@web142302.mail.bf1.yahoo.com> References: <1369785428.89131.YahooMailNeo@web142302.mail.bf1.yahoo.com>
next in thread | previous in thread | raw e-mail | index | archive | help
On 5/29/13 7:57 AM, Jeff wrote: > Hi, > > I run PCBSD 9.1 and have a jail setup (uses the Warden PBI to set it up). > > In that jail which has it's own local IP like 192.168.1.12, I have an Apache server running Drupal. > > Normally when I connect the computer to a single router that is connected to a modem, I set "nameserver 192.168.1.1", i.e. the router LAN IP or gateway, in etc/resolv.conf and have no problems. > > Now I have added a 2nd router daisy chained from the primary router, running a subnet (primary router has IP: 192.168.1.1 and secondary router: 192.168.2.1). > > The computer running the jail is plugged into the secondary router. > > The problem is, the jail can't contact the internet. I can SSH into the jail but it takes a very long time to connect, like 30 seconds or so. > > > I've tried different IP addresses for "nameserver" but nothing works. > > I have no problems using the internet from the main part of the computer, just the jails. > > > Any ideas why this happens and how to get around it? I've had this problem for years with different versions of FreeBSD. > > Do I need to create a static route through to the gateway, and if so, why is that not a problem using a browser from the main part of the machine? basically your jail is using the same routing as the rest of the machine you have several options, though they may not all be supported in the PCBSD 9.1 jail system 1/ you could use ipfw to do packet forwarding this is what we used to before we had #2 and #3. 2/ you can specify that the jail should use a different FIB (routing table) you should look up setfib(1) and setfib(2) and follow the 'see also' pointers as well. 3/ you can use VIMAGE and set up a jail with a completely separate network stack. DOcumentation for this is a bit hard to find but use the 'vnet' option in jail(8) nad look up VIMAGE and vnet in google. > > > Thanks, > > Jeff > _______________________________________________ > freebsd-net@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-net > To unsubscribe, send any mail to "freebsd-net-unsubscribe@freebsd.org" > >
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?51A562B2.4020101>