Re: Jail source address selection in 8.1-RELEASE

2010-11-25 Thread Bjoern A. Zeeb
On Wed, 24 Nov 2010, Steve Polyack wrote: Hi, There appears to be a loosely documented sysctl 'security.jail.param.ip4.saddrsel' which should limit source IP selection of jails to their primary jail interface/IP. The sysctl does not appear to do anything, however: # sysctl security.jail.pa

Jail source address selection in 8.1-RELEASE

2010-11-24 Thread Steve Polyack
Hi, There appears to be a loosely documented sysctl 'security.jail.param.ip4.saddrsel' which should limit source IP selection of jails to their primary jail interface/IP. The sysctl does not appear to do anything, however: # sysctl security.jail.param.ip4.saddrsel=0 -> # echo $? 0 # sysctl