Re: Multiple IPS - Freebsd 7.1

2008-10-02 Thread Brian A. Seklecki
On Wed, 2008-10-01 at 12:39 +, Bjoern A. Zeeb wrote:
 thoughts on MFCing it to 7-STABLE so it could be in 7.2-R. I cannot

Someone might be encouraged by the idea of a nice 21 year scotch under
the Christmas tree.

Although I'm not holding my breath (Bjoern -- I have to talk to you
about that FAST_IPSEC NAT-T patch for FreeBSD), I'm just glad that this
wont involve / require  a full pullup of Julian Elischer's Vimage and
FIB+Multi-Routing-Table changes.

Chances of those making way into 7.x are low like Skylab.

-- 
Brian A. Seklecki [EMAIL PROTECTED]
Collaborative Fusion, Inc.




IMPORTANT: This message contains confidential information and is intended only 
for the individual named. If the reader of this message is not an intended 
recipient (or the individual responsible for the delivery of this message to an 
intended recipient), please be advised that any re-use, dissemination, 
distribution or copying of this message is prohibited. Please notify the sender 
immediately by e-mail if you have received this e-mail by mistake and delete 
this e-mail from your system.


___
freebsd-jail@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-jail
To unsubscribe, send any mail to [EMAIL PROTECTED]


Multiple IPS - Freebsd 7.1

2008-10-01 Thread Sami Halabi
hi everyone,

I saw a lot of messages about this so here is it - i just patched it (took
me a day but okay :)

i just downloaded the latest src using this sup file - cvsup:
http://www.royalshells.com/download/freebsd/stable-supfile

# cvsup stable-supfile


i applied the following patch (which i changed to get to work with the
current src):
http://www.royalshells.com/download/freebsd/bz_jail7-20080727-11-at146062-Fixed_By_Sody_1.10.08.diff

to patch do:
# cd /usr/src
# patch -p6  bz_jail7-20080727-11-at146062-Fixed_By_Sody_1.10.08.diff

after done re-compile the kernel:
# cp /usr/src/sys/netinet/in_pcb.h /usr/include/netinet/
# cp /usr/src/sys/sys/jail.h /usr/include/sys/

clean obj dir:
---
# rm -Rf /usr/obj/*

compile jail and jls:

# cd /usr/src/usr.sbin/jail/
# make clean  make depend  make install
# cd /usr/src/usr.sbin/jls/
# make clean  make depend  make install

compile the kernel:
-
# cd /usr/src
# make buildworld
# make buildkernel KERNCONF=GENERIC
# make installworld
# make installkernel KERNCONF=GENERIC
# mergemaster -U

after reboot:
# uname -a
FreeBSD server.com 7.1-PRERELEASE FreeBSD 7.1-PRERELEASE #0: Tue Sep 30
20:03:00 UTC 2008 [EMAIL PROTECTED]:/usr/obj/usr/src/sys/GENERIC
i386
#

check the patch:
# jail
usage: jail [-hi] [-n jailname] [-J jid_file] [-s securelevel] [-l -u
username | -U username] path hostname [ip[,..]] command ...
#

Enjoy.

Sami
___
freebsd-jail@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-jail
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: jail/broadcast IP [was: Multiple IPS - Freebsd 7.1]

2008-10-01 Thread Bjoern A. Zeeb

On Wed, 1 Oct 2008, Nejc S(koberne wrote:

Hi,


does this patch maybe also makes it possible for a jail to listen at a 
broadcast address?


So before you are going to post this to another thread -- what are you
trying to achive?

--
Bjoern A. Zeeb  Stop bit received. Insert coin for new game.
___
freebsd-jail@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-jail
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Multiple IPS - Freebsd 7.1

2008-10-01 Thread Bjoern A. Zeeb

On Wed, 1 Oct 2008, Sami Halabi wrote:

Hi,


i applied the following patch (which i changed to get to work with the
current src):
http://www.royalshells.com/download/freebsd/bz_jail7-20080727-11-at146062-Fixed_By_Sody_1.10.08.diff


I do not know what the Fixed_By_Sody_1.10.08 part is but
it's at least based on a backlevel patch of mine so I hope
someone fixed the locking for 7.1-PRE.

I had posted a patch for 7-STABLE (7.1-PRE) last month
http://people.freebsd.org/~bz/bz_jail7-20080920-01-at150161.diff
so taking that one you could have save yourself a lot of time I guess.

In case you have changes it would be good to know what you did
or what I do not have so the do not have forks as my version will hit
HEAD soon and has changed (also the user space) since July.

/bz

--
Bjoern A. Zeeb  Stop bit received. Insert coin for new game.
___
freebsd-jail@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-jail
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Multiple IPS - Freebsd 7.1

2008-10-01 Thread Sami Halabi
bz,
your right.
i've posted that link :)

Sami

On Wed, Oct 1, 2008 at 2:08 PM, Bjoern A. Zeeb 
[EMAIL PROTECTED] wrote:

 On Wed, 1 Oct 2008, Sami Halabi wrote:

 Hi,

 i applied the following patch (which i changed to get to work with the
 current src):

 http://www.royalshells.com/download/freebsd/bz_jail7-20080727-11-at146062-Fixed_By_Sody_1.10.08.diff


 I do not know what the Fixed_By_Sody_1.10.08 part is but
 it's at least based on a backlevel patch of mine so I hope
 someone fixed the locking for 7.1-PRE.

 I had posted a patch for 7-STABLE (7.1-PRE) last month
 http://people.freebsd.org/~bz/bz_jail7-20080920-01-at150161.diff
 so taking that one you could have save yourself a lot of time I guess.

 In case you have changes it would be good to know what you did
 or what I do not have so the do not have forks as my version will hit
 HEAD soon and has changed (also the user space) since July.

 /bz

 --
 Bjoern A. Zeeb  Stop bit received. Insert coin for new game.

___
freebsd-jail@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-jail
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Multiple IPS - Freebsd 7.1

2008-10-01 Thread Sami Halabi
hi,
i didn't try it.

i just saw a new path from bz and tried it, now compiling, here is it:
http://people.freebsd.org/~bz/bz_jail7-20080920-01-at150161.diff
Sami

royalshells.com, loyalness.com,

On Wed, Oct 1, 2008 at 1:56 PM, Steven Hartland [EMAIL PROTECTED]wrote:

 I would dearly like to see this make the 7.1 release, multi IP's in order
 to support backend interfaces in jails, is something that we hit against
 all the time.

   Regards
   Steve
 - Original Message - From: Sami Halabi [EMAIL PROTECTED]
 To: freebsd-jail@freebsd.org
 Sent: Wednesday, October 01, 2008 12:21 PM
 Subject: Multiple IPS - Freebsd 7.1


   hi everyone,

 I saw a lot of messages about this so here is it - i just patched it (took
 me a day but okay :)

 i just downloaded the latest src using this sup file - cvsup:
 http://www.royalshells.com/download/freebsd/stable-supfile

 # cvsup stable-supfile


 i applied the following patch (which i changed to get to work with the
 current src):

 http://www.royalshells.com/download/freebsd/bz_jail7-20080727-11-at146062-Fixed_By_Sody_1.10.08.diff

 to patch do:
 # cd /usr/src
 # patch -p6  bz_jail7-20080727-11-at146062-Fixed_By_Sody_1.10.08.diff

 after done re-compile the kernel:
 # cp /usr/src/sys/netinet/in_pcb.h /usr/include/netinet/
 # cp /usr/src/sys/sys/jail.h /usr/include/sys/

 clean obj dir:
 ---
 # rm -Rf /usr/obj/*

 compile jail and jls:
 
 # cd /usr/src/usr.sbin/jail/
 # make clean  make depend  make install
 # cd /usr/src/usr.sbin/jls/
 # make clean  make depend  make install

 compile the kernel:
 -
 # cd /usr/src
 # make buildworld
 # make buildkernel KERNCONF=GENERIC
 # make installworld
 # make installkernel KERNCONF=GENERIC
 # mergemaster -U

 after reboot:
 # uname -a
 FreeBSD server.com 7.1-PRERELEASE FreeBSD 7.1-PRERELEASE #0: Tue Sep 30
 20:03:00 UTC 2008 [EMAIL PROTECTED]:/usr/obj/usr/src/sys/GENERIC
 i386
 #

 check the patch:
 # jail
 usage: jail [-hi] [-n jailname] [-J jid_file] [-s securelevel] [-l -u
 username | -U username] path hostname [ip[,..]] command ...
 #

 Enjoy.

 Sami
 ___
 freebsd-jail@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-jail
 To unsubscribe, send any mail to [EMAIL PROTECTED]


 
 This e.mail is private and confidential between Multiplay (UK) Ltd. and the
 person or entity to whom it is addressed. In the event of misdirection, the
 recipient is prohibited from using, copying, printing or otherwise
 disseminating it or any information contained in it.
 In the event of misdirection, illegible or incomplete transmission please
 telephone +44 845 868 1337
 or return the E.mail to [EMAIL PROTECTED]


___
freebsd-jail@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-jail
To unsubscribe, send any mail to [EMAIL PROTECTED]