Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 1 May 2012 12:41:25 -0700
From:      David Thiel <lx@redundancy.redundancy.org>
To:        freebsd-stable@freebsd.org
Subject:   Jails can't get routing info
Message-ID:  <20120501194101.GD66263@redundancy.redundancy.org>

next in thread | raw e-mail | index | archive | help
Hello,

So, I've been trying to debug an issue running nmap scans within jails, 
partially documented here:

http://seclists.org/nmap-dev/2012/q2/220

On further debugging, it's seeming like jails can't read routing 
information directly at all:

# route get 69.163.203.254
route: writing to routing socket: No such process

Now, this is normally done via reading the routing table via something like 
socket(PF_ROUTE, SOCK_RAW, AF_INET), so one would suspect that this is a 
problem with raw sockets; but raw sockets are enabled within the jail. 
netstat is able to read routing information just fine, but I don't think 
it's doing it via the socket() call.

Anyone know why this behavior might be happening?

Thanks,
David



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20120501194101.GD66263>