On Thu, 4 Jan 2007 13:54:22 +0200, Nikos Vassiliadis <[EMAIL PROTECTED]> wrote:

>> Anyway. Could someone tell me whether it is possible or not?
>> Does anyone know a solution for assigning a jail to a trusted network
>> through a tunnel without any influence on the base system's networking?
> I can use my pptp address from within a jail, of course the tunnel is
> already
> up and visible to the base system. You can also get the "secondary IP
> address
> effect" for your jail using a loopback interface. For example:
> ng0 <->
> lo1
> would also be your jail address, totally unrelated to the
> tunnel.
> I am not sure what you are looking for. Perhaps
> you should explain a bit further. Nikos

i do not really have a complete plan at the moment but an idea to use a
jail on my remote system as a sandbox. i mean i would like to set up a jail
and use it (sometimes) as client / virtual machine in a remote network
through some kind of tunneling without any modification to the base system
and sometimes as a regular host to test and compile some completelydifferent
i suspect that it is impossible but it might look like as configuring a pseudo
device (eg gre) and use only pure ip traffic through the base system's nat
until the jail's endpoint.

to be honest i am pretty new to freebsd jails so i might be wromg. so please
correct me if you know more. :)

of course the best solution would be to use true virtualization. anyway do you
know anything about the xen dom0 status on freebsd x86 smp? :)


freebsd-questions@freebsd.org mailing list
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Reply via email to