Date: Tue, 5 Aug 2008 10:43:13 -0400 (EDT) From: doug <doug@fledge.watson.org> To: Redd Vinylene <reddvinylene@gmail.com> Cc: dwmalone@maths.tcd.ie, questions@freebsd.org Subject: Re: Jails, IPs and identd Message-ID: <alpine.BSF.1.10.0808051039060.54487@fledge.watson.org> In-Reply-To: <f1019d520808050259n2e697558i8f8b1dcbf283582c@mail.gmail.com> References: <f1019d520808050259n2e697558i8f8b1dcbf283582c@mail.gmail.com>
next in thread | previous in thread | raw e-mail | index | archive | help
On Tue, 5 Aug 2008, Redd Vinylene wrote: > Hello! > > I have a jail with multiple IPs. It runs identd, however it only works > from the jail's main IP: > > auth stream tcp nowait root internal auth -r -f -n -o UNKNOWN -t 30 > > How do I make it work from absolutely all IPs? > > Perhaps: auth stream tcp nowait root internal auth -r -f -n -o UNKNOWN > -t 30 -a <insert hundreds of ips here>? > > Thank you all! > > # man identd > > -a Specify one specific IP address to bind to. Alternatively, a > hostname can be specified, in which case the IPv4 or IPv6 address > which corresponds to that hostname is used. Usually a hostname > is specified when inetd is run inside a jail(8), in which case > the hostname corresponds to that of the jail(8) environment. > > When the hostname specification is used and both IPv4 and IPv6 > bindings are desired, one entry with the appropriate protocol > type for each binding is required for each service in > /etc/inetd.conf. For example, a TCP-based service would need two > entries, one using ``tcp4'' for the protocol and the other using > ``tcp6''. See the explanation of the /etc/inetd.conf protocol > field below. > It is my understanding you get one IP/jail and that multiple IPs are a work in progress. See http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/jails-intro.html A jail is characterized by four elements: : * An IP address -- this will be assigned to the jail and cannot be changed in any way during the jail's life span. The IP address of a jail is usually an alias address for an existing network interface, but this is not strictly necessary.
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?alpine.BSF.1.10.0808051039060.54487>