Re: no network connection from inside a jail

2014-10-02 Thread Fbsd8
Erich Dollansky wrote: Hi, I recently upgraded to 10.1 BETA3 via sources. All seemed to be fine until I started jails which connect to the Internet. It simply does not work anymore. When the browser from the jail connects to another jail on the same machine via HTTP, it all works. Accesses to

Re: vnet jail and ipfw/nat on host - keep-state problem?

2014-07-12 Thread Fbsd8
to get it going in my lab setup and add a howto page to share this with others. Cheers, Peter On Sat, Jul 12, 2014 at 1:16 PM, Fbsd8 fb...@a1poweruser.com mailto:fb...@a1poweruser.com wrote: Peter Toth wrote: On Sat, Jul 12, 2014 at 1:33 AM, Fbsd8 fb...@a1poweruser.com

Re: vnet jail and ipfw/nat on host - keep-state problem?

2014-07-11 Thread Fbsd8
Peter Toth wrote: Have not used natd with IPFW much as always preferred PF to do everything on the host. I have only a wild guess - the me keyword in IPFW is substituted only to the host's IPs known to itself. The host's IPFW firewall most likely doesn't know anything about IPs assigned to vnet

Re: Jail vnet features

2014-07-11 Thread Fbsd8
Marcin Michta wrote: Hello, I want to ask what are advantages and disadvantages using VNET? I know that it allows each jail to have a private networking stack, but what else? Regards Marthin Its experimental, it has many bugs posted in PR system, loses memory every time a vnet

Re: iocage - drop in jail manager

2014-06-17 Thread Fbsd8
Peter Toth wrote: For anyone interested in managing jails with VNET, ZFS and resource limits I have created a jail manager script https://github.com/pannon/iocage . Basically rewritten most of zjails in pure sh with simplicity in mind. 90% is done final commits will be happening in the next 2

Re: new jail framework with vnet, zfs and jail.conf support

2014-05-13 Thread Fbsd8
freebsd_j...@dachev.info wrote: Hi, I'm currently in process of development of new tool for easy jail administration with zfs and vimage/vnet(bridge epair interface) support The idea is to have a single application (python script) without any other confg files and customization This tool is

Re: Can Firefox break out of a jail

2014-05-05 Thread Fbsd8
Erich Dollansky wrote: Hi, I do some experimenting with jails at the moment on a FreeBSD 10.0 machine. The jails are all setup manually according to the handbook and man jail. Each jail gets a name and an IP address. Individual ports are then installed via the ports tree. X is running on the

Re: ezjail and UPDATING20131010

2013-10-11 Thread Fbsd8
Kenta Suzumoto wrote: Hi there. I updated to 10-STABLE after it was branched and suddenly none of my [ez]jails will start. Does it have anything to do with the entry in UPDATING? What's the best way to solve it? The jail rc.script environment in 10.0 has been patched to convert all the jail

Re: Starting jail breaks routing / multi-network jail

2013-08-02 Thread Fbsd8
Josh Beard wrote: Hello, I posted this on forums.freebsd.org ( http://forums.freebsd.org/showthread.php?t=41135), but figured I may have better luck here. I'm trying to setup a host that will accommodate two networks for its jails - with two NICs. One of this NICs (igb0) is connected to our

Re: Cant reach Jailed services from internet.

2013-06-02 Thread Fbsd8
Mogamat Abrahams wrote: Joe fbsd8@... writes: Your 67.205.xx.xx ip address looks like a dynamic ip address that you use dhcp to automatically obtain all the network configuration information needed by your host. Static ip addresses don't work that way. You have to manually configure

Re:qjail fork attribution was Handbook Jail Chapter rewrite available for critique

2013-03-26 Thread Fbsd8
Dirk Engling wrote: Dear JoeB, since you just threatened me via private email to expose my evil plans of preventing your ubercool project from taking FreeBSD by storm, I would like to comment on your views and your project publicly On 22.03.13 23:12, Fbsd8 wrote: On the subject of qjail

Re: Handbook Jail Chapter rewrite available for critique

2013-03-22 Thread Fbsd8
Ian Smith wrote: On Tue, 19 Mar 2013 17:53:30 +0100, Dirk Engling wrote: On 18.03.13 20:16, s...@tormail.org wrote: to configure things themselves. In my experience, ezjail is a much better solution. I also see that you are the maintainer/author of qjail and like to shovel your

Re: Handbook Jail Chapter rewrite available for critique

2013-03-22 Thread Fbsd8
s...@tormail.org wrote: On Fri, Mar 22, 2013 at 6:12 PM, Fbsd8 fb...@a1poweruser.com wrote: Boy this simple critique request sure has gotten out of hand. So lets set the record straight. You got exactly what you asked for. On the subject ezjail not being referenced in the document like

Re: Handbook Jail Chapter rewrite available for critique

2013-03-18 Thread Fbsd8
Nicolas de Bari Embriz Garcia Rojas wrote: Hi, nice document, related to the use of jail.con maybe the use of sysutils/jail2 could be mention since I think makes things a little more easy. I don't know what you mean by jail.con, But I have reviewed sysutils/jail2 which tries to work with the

Re: Handbook Jail Chapter rewrite available for critique

2013-03-18 Thread Fbsd8
s...@tormail.org wrote: Fbsd8 fb...@a1poweruser.com wrote: This is my first public exposure. The Doc gang is seeing it for the first time just like you. Gotcha. I also see you're pushing the sysutils/qjail port for users who don't want to configure things themselves. In my experience, ezjail

Re: Handbook Jail Chapter rewrite available for critique

2013-03-18 Thread Fbsd8
Andreas Nilsson wrote: Great! There really was a need to modernize the handbook with regards to jails. Since I'm not a native English speaker I'll leave grammar and spelling for those who are ;) My first impressions are along the lines: To much scripts, to few examples/scenarios. Our users are