Re: jails bind ip

2013-01-27 Thread Ivailo Tanusheff
Hi, First of all usage of 127.0.0.1 as second address is nothing but wrong, as this is the loopback address :) For the second part of the question - I suppose it has nothing to do with the BSD and the jail subsystem. I am not sure why you have eth1 tbh, you should only have eth0, maybe

Re: jails bind ip

2013-01-26 Thread Fbsd8
Zyumbilev, Peter wrote: Hi, I have successfully run multiple jails on freebsd 9.1 Two of the jails are FreeBSD and I have no problems with them. However I havesome strange problem with Debian 6.0 Jail. This is my config jail_debian_rootdir=/jail/debian jail_debian_hostname=debian.bivol.net

Re: jails bind ip

2013-01-26 Thread Zyumbilev, Peter
Are you saying you installed the Debian 6.0 operating system inside of a Freebsd jail and expect it to function? on top of all works ;-) Look at mailing list archives earlier ...See mails from me. Peter ___ freebsd-questions@freebsd.org

Re: jails bind ip

2013-01-26 Thread Fbsd8
Zyumbilev, Peter wrote: Are you saying you installed the Debian 6.0 operating system inside of a Freebsd jail and expect it to function? on top of all works ;-) Look at mailing list archives earlier ...See mails from me. Peter Ok I read the archive thread subject jails. You read a

Re: jails bind ip

2013-01-26 Thread Zyumbilev, Peter
On 26/01/2013 23:06, Fbsd8 wrote: Zyumbilev, Peter wrote: Are you saying you installed the Debian 6.0 operating system inside of a Freebsd jail and expect it to function? on top of all works ;-) Look at mailing list archives earlier ...See mails from me. Peter Ok I read the

Re: jails ip addresses

2013-01-25 Thread Patrick Lamaiziere
Le Thu, 24 Jan 2013 11:51:46 -0500, Fbsd8 fb...@a1poweruser.com a écrit : Is there any situation where assigning the same IP address to a new jail that has already been assigned to a previous jail valid? I think not, but want verification. What are your thoughts? I'm sure they are case

Re: Jails

2013-01-15 Thread Leonardo M . Ramé
- Original Message - From: Zyumbilev, Peter pe...@aboutsupport.com To: freebsd-questions@FreeBSD.org freebsd-questions@FreeBSD.org Cc: Sent: Tuesday, January 15, 2013 3:12 AM Subject: Re: Jails On 15/01/2013 02:10, Leonardo M. Ramé wrote: Yes, and also defined /etc

Re: Jails

2013-01-14 Thread Leonardo M . Ramé
From: Zyumbilev, Peter pe...@aboutsupport.com To: freebsd-questions@FreeBSD.org freebsd-questions@FreeBSD.org Sent: Monday, January 14, 2013 3:53 AM Subject: Re: Jails On 13/01/2013 23:58, Leonardo M. Ramé wrote: root@debian:/# ping www.google.com

Re: Jails

2013-01-14 Thread Zyumbilev, Peter
On 15/01/2013 02:10, Leonardo M. Ramé wrote: Yes, and also defined /etc/resolv.conf. Any hint? Leonardo M. Ramé http://leonardorame.blogspot.com This is my jail conf. jail_debian_rootdir=/jail/debian jail_debian_hostname=debian.bivol.net jail_debian_ip=192.168.30.12

Re: Jails

2013-01-14 Thread Devin Teske
On Jan 14, 2013, at 10:12 PM, Zyumbilev, Peter wrote: On 15/01/2013 02:10, Leonardo M. Ramé wrote: Yes, and also defined /etc/resolv.conf. Any hint? Leonardo M. Ramé http://leonardorame.blogspot.com This is my jail conf. jail_debian_rootdir=/jail/debian

Re: Jails

2013-01-13 Thread Zyumbilev, Peter
On 12/01/2013 18:41, Devin Teske wrote: On Jan 11, 2013, at 11:31 PM, Zyumbilev, Peter wrote: Hi, I have not tested it, but so far things do not look promising... I cannot even run netstat -nvatp properly, however sopcast seemed to run, but have not tested it, for plex - have not tried

Re: Jails

2013-01-13 Thread Leonardo M . Ramé
From: Zyumbilev, Peter pe...@aboutsupport.com To: freebsd-questions@FreeBSD.org Cc: Mark Felder f...@feld.me; Devin Teske dte...@freebsd.org; Devin Teske devin.te...@fisglobal.com Sent: Sunday, January 13, 2013 7:09 AM Subject: Re: Jails On 12/01/2013 18:41

Re: Jails

2013-01-13 Thread Devin Teske
, January 13, 2013 7:09 AM Subject: Re: Jails On 12/01/2013 18:41, Devin Teske wrote: On Jan 11, 2013, at 11:31 PM, Zyumbilev, Peter wrote: Hi, I have not tested it, but so far things do not look promising... I cannot even run netstat -nvatp properly, however sopcast seemed to run

Re: Jails

2013-01-13 Thread Leonardo M . Ramé
- Original Message - From: Devin Teske devin.te...@fisglobal.com To: Leonardo M. Ramé martinr...@yahoo.com Cc: freebsd-questions@FreeBSD.org freebsd-questions@FreeBSD.org Sent: Sunday, January 13, 2013 2:23 PM Subject: Re: Jails On Jan 13, 2013, at 7:45 AM, Leonardo M. Ramé

Re: Jails

2013-01-13 Thread Zyumbilev, Peter
On 13/01/2013 23:58, Leonardo M. Ramé wrote: root@debian:/# ping www.google.com WARNING: setsockopt(ICMP_FILTER): Protocol not available WARNING: your kernel is veeery old. No problems. PING www.google.com (173.194.42.16) 56(84) bytes of data. ping: recvmsg: Invalid argument ping:

Re: Jails

2013-01-13 Thread Zyumbilev, Peter
On 13/01/2013 23:58, Leonardo M. Ramé wrote: root@debian:/# ping www.google.com WARNING: setsockopt(ICMP_FILTER): Protocol not available WARNING: your kernel is veeery old. No problems. PING www.google.com (173.194.42.16) 56(84) bytes of data. ping: recvmsg: Invalid argument ping:

Re: Jails

2013-01-12 Thread Devin Teske
On Jan 11, 2013, at 11:31 PM, Zyumbilev, Peter wrote: Hi, I have not tested it, but so far things do not look promising... I cannot even run netstat -nvatp properly, however sopcast seemed to run, but have not tested it, for plex - have not tried yet. netstat isn't allowed in

Re: Jails

2013-01-11 Thread Zyumbilev, Peter
On 11/01/2013 17:31, Patrick Lamaiziere wrote: Le Fri, 11 Jan 2013 17:02:19 +0200, Zyumbilev, Peter pe...@aboutsupport.com a écrit : Hi, I run FreeBSD 9.1 64 bit(Nas4free). I have no problem setting up FreeBSD jails inside. However, I wonder, is there any tutorial on how to make Debian

Re: Jails

2013-01-11 Thread Mark Felder
On Fri, 11 Jan 2013 18:28:41 +0200 Zyumbilev, Peter pe...@aboutsupport.com wrote: 1. Use http://download.openvz.org/template/precreated/debian-6.0-x86.tar.gz instead the file listed in the howto. 2. Run sysctl compat.linux.osrelease=2.6.32 in Freebsd shell before starting the jail,

Re: Jails

2013-01-11 Thread Zyumbilev, Peter
Hi, I have not tested it, but so far things do not look promising... I cannot even run netstat -nvatp properly, however sopcast seemed to run, but have not tested it, for plex - have not tried yet. Peter On 11/01/2013 21:19, Mark Felder wrote: On Fri, 11 Jan 2013 18:28:41 +0200 Zyumbilev,

Re: Jails on FreeBSD 9.0

2012-07-23 Thread Eitan Adler
On 22 July 2012 21:55, Herbert J. Skuhra h.sku...@gmail.com wrote: On Sat, 21 Jul 2012 16:10:56 +0200 Herbert J. Skuhra h.sku...@gmail.com wrote: On Sat, Jul 21, 2012 at 11:24 AM, Herbert J. Skuhra h.sku...@gmail.com wrote: Hi, ok, this is obviously a pf problem and the reason why the

Re: Jails on FreeBSD 9.0

2012-07-23 Thread Herbert J. Skuhra
On Mon, Jul 23, 2012 at 8:31 AM, Eitan Adler li...@eitanadler.com wrote: If this is a fxp bug, can you please file a PR explaining the issue and how to reproduce it? kern/170081 -- Herbert ___ freebsd-questions@freebsd.org mailing list

Re: Jails on FreeBSD 9.0

2012-07-22 Thread Herbert J. Skuhra
On Sat, 21 Jul 2012 16:10:56 +0200 Herbert J. Skuhra h.sku...@gmail.com wrote: On Sat, Jul 21, 2012 at 11:24 AM, Herbert J. Skuhra h.sku...@gmail.com wrote: Hi, ok, this is obviously a pf problem and the reason why the network in the jail doesn't work. ifconfig lo1 create

Re: Jails on FreeBSD 9.0

2012-07-21 Thread Herbert J. Skuhra
Hi, ok, this is obviously a pf problem and the reason why the network in the jail doesn't work. ifconfig lo1 create ifconfig lo1 10.0.0.10 netmask 0xff00 nc -s 10.0.0.10 xx.xx.xx.xx 25 With pf: connections fails; server receives SYN-ACK, but nc continues sending SYNs until nc gives up With

Re: Jails on FreeBSD 9.0

2012-07-21 Thread Herbert J. Skuhra
On Sat, Jul 21, 2012 at 11:24 AM, Herbert J. Skuhra h.sku...@gmail.com wrote: Hi, ok, this is obviously a pf problem and the reason why the network in the jail doesn't work. ifconfig lo1 create ifconfig lo1 10.0.0.10 netmask 0xff00 nc -s 10.0.0.10 xx.xx.xx.xx 25 With pf: connections

Re: Jails on FreeBSD 9.0

2012-07-17 Thread Kalle Møller
On Thu, Jul 12, 2012 at 9:04 PM, Herbert J. Skuhra h.sku...@gmail.com wrote: On Thu, Jul 12, 2012 at 11:56 AM, joris dedieu joris.ded...@gmail.com wrote: 2012/7/12 Herbert J. Skuhra h.sku...@gmail.com: On Wed, Jul 11, 2012 at 11:59 PM, Herbert J. Skuhra h.sku...@gmail.com wrote: Hi,

Re: Jails on FreeBSD 9.0

2012-07-17 Thread Herbert J. Skuhra
On Tue, Jul 17, 2012 at 9:59 AM, Kalle Møller freebsd-questi...@k-moeller.dk wrote: On Thu, Jul 12, 2012 at 9:04 PM, Herbert J. Skuhra h.sku...@gmail.com wrote: On Thu, Jul 12, 2012 at 11:56 AM, joris dedieu joris.ded...@gmail.com wrote: 2012/7/12 Herbert J. Skuhra h.sku...@gmail.com: On

Re: Jails V2, VIMAGE, and integration in the base system

2012-02-04 Thread Hugo Silva
On 02/03/12 17:02, Devin Teske wrote: Please give this a try: http://druidbsd.sf.net/vimage.shtml http://druidbsd.sf.net/download.shtml Hi, Interesting. Is it safe to run in production (VIMAGE/vnets) ? ___ freebsd-questions@freebsd.org mailing

Re: Jails V2, VIMAGE, and integration in the base system

2012-02-04 Thread Devin Teske
On Feb 4, 2012, at 10:45 AM, Hugo Silva wrote: On 02/03/12 17:02, Devin Teske wrote: Please give this a try: http://druidbsd.sf.net/vimage.shtml http://druidbsd.sf.net/download.shtml Hi, Interesting. Is it safe to run in production (VIMAGE/vnets) ? I can't speak to every

RE: Jails V2, VIMAGE, and integration in the base system

2012-02-03 Thread Devin Teske
-Original Message- From: owner-freebsd-questi...@freebsd.org [mailto:owner-freebsd- questi...@freebsd.org] On Behalf Of Hugo Silva Sent: Friday, February 03, 2012 8:17 AM To: freebsd-questions@freebsd.org Subject: Jails V2, VIMAGE, and integration in the base system Hello, I

Re: Jails V2, VIMAGE, and integration in the base system

2012-02-03 Thread Fbsd8
Hugo Silva wrote: Hello, I didn't find much about jails v2 + epair + vimage on google; The FreeBSD wiki pages concerning this subject seem fairly outdated (that or not much has happened in 3 years), and the manpages don't mention much about vimage/vnet. According to

Re: Jails within different networks ... ?

2011-12-04 Thread Snoop
I've actually done that but the result was jails coming up incredibly slowly and once up basically not wired. I'm gonna check my configuration again and I'll update the mailing list soon. Thanks for you time to you all. On Sat, 2011-12-03 at 21:54 +, Matthew Seaman wrote: On 03/12/2011

Re: Jails within different networks ... ?

2011-12-04 Thread Snoop
Just an update. It seems to be working well. The jail startup slowness I believe is due to the fact that the DNS is still down. Thanks for your time. ### host rc.conf related section ifconfig_lagg0=laggproto failover laggport bge0 laggport bge1 xxx.xxx.26.224/24 ifconfig_lagg0_alias_0=inet

Re: Jails within different networks ... ?

2011-12-03 Thread Sergio Tam
2011/12/3 Snoop sn...@email.it: Hi there, I've a doubt! I have 3 jails within the host xxx.xxx.26.224 configured in this way (below) and everything works well. What if I want to enable another jail but I don't want to assign to that my next available public ip address xxx.xxx.26.228/24 but I

Re: Jails within different networks ... ?

2011-12-03 Thread Matthew Seaman
On 03/12/2011 17:54, Snoop wrote: I have 3 jails within the host xxx.xxx.26.224 configured in this way (below) and everything works well. What if I want to enable another jail but I don't want to assign to that my next available public ip address xxx.xxx.26.228/24 but I want this jail to have

Re: Jails: How do i limit what ifconfig shows?

2011-04-23 Thread Peter Toth
Use ugidfw to limit/deny access to ifconfig - man ugidfw Cheers, On 04/23/11 08:21, xor wrote: Hullo First off, thanks for a lovely operating system 3 I decided to go for FreeBSD perhaps 3 days ago. Before, ive been an Debian/OpenBSD guy, and ive only used my obsd box for redundant

Re: Jails: How do i limit what ifconfig shows?

2011-04-22 Thread Michael Ross
Am 22.04.2011, 22:21 Uhr, schrieb xor xor...@gmail.com: Hullo First off, thanks for a lovely operating system 3 I decided to go for FreeBSD perhaps 3 days ago. Before, ive been an Debian/OpenBSD guy, and ive only used my obsd box for redundant firewalls and networking. Ive not been running any

Re: Jails: How do i limit what ifconfig shows?

2011-04-22 Thread xor
But then the root in the jail can just go and compile a new version of ifconfig from the ports collection. (Generally its a flawed idea to just remove the binaries. Someone can just download new ones. And if downloading new binaries is not allowed, they can always just push stdin through b64.. etc

Re: jails and one dynamic ip address

2010-05-25 Thread Balázs Mátéffy
Hi, Sure there can be a better solution (I think :)): Use an rfc1918 private address range for your Jail, and use nat, to forward your external interface IP to the private address of the jail. This can be done in ipnat, PF, or the other natting, packet filtering tools. Hope I understood your

Re: jails and one dynamic ip address

2010-05-25 Thread Fbsd1
I get one dynamic ip address from my ISP. This is what I specify on the jail for public network access. When the ip address changes on me I have to manually change the ip address associated with the jail. Is there some method I can code so jail will all ways have public network access? Hi,

Re: Jails and Hardware security

2010-02-02 Thread C. C. Tang
I think you may write your only rule set for that jail in /etc/devfs.rules and specify it by using the line: jail_(jailname)_devfs_ruleset=(rule_name) in /etc/rc.conf Or corresponding line in /usr/local/etc/ezjail/(jailname) if you are using ezjail. Regards, C.C. On 1/31/2010 6:27 AM, Jay

Re: Jails - Ethernet data vs IP data

2010-01-12 Thread Jamie Gritton
On 01/09/10 21:21, Tim Judd wrote: I bought a new SiliconDust HDHomeRun device which brings two Digital coaxial tuners to an ethernet network. From what I read and understand about the HDHomeRun (HDHR), is that it does have an IP address assigned to the system, but all packets of video are

Re: Jails setup with binary packages only

2009-12-27 Thread Tim Judd
On 12/27/09, Guy Marcenac g...@posteurs.com wrote: I would like to use a freebsd system with binary packages only. I want to heavily use the jail concept. All the documentation about jails implies the use of buildworld into the jails. In order to avoid any compilation time, I installed a

Re: Jails: /bin/tcsh: Permission Denied

2009-10-05 Thread Oliver Fromme
APseudoUtopia apseudouto...@gmail.com wrote: I'm setting up jails on my system. I started with a httpd jail for nginx and php to run in. I used ezjail to create it. I went through all the steps, and got a jail setup and working. I've logged in and out several times and installed a couple

Re: Jails: /bin/tcsh: Permission Denied

2009-10-05 Thread APseudoUtopia
On Mon, Oct 5, 2009 at 5:51 AM, Oliver Fromme o...@lurza.secnetix.de wrote: APseudoUtopia apseudouto...@gmail.com wrote:   I'm setting up jails on my system. I started with a httpd jail for   nginx and php to run in. I used ezjail to create it. I went through   all the steps, and got a jail

Re: Jails: /bin/tcsh: Permission Denied

2009-10-05 Thread APseudoUtopia
On Mon, Oct 5, 2009 at 9:19 AM, APseudoUtopia apseudouto...@gmail.com wrote: On Mon, Oct 5, 2009 at 5:51 AM, Oliver Fromme o...@lurza.secnetix.de wrote: APseudoUtopia apseudouto...@gmail.com wrote:   I'm setting up jails on my system. I started with a httpd jail for   nginx and php to run in.

Re: Jails: /bin/tcsh: Permission Denied

2009-10-05 Thread Glen Barber
On Mon, Oct 5, 2009 at 1:24 PM, APseudoUtopia apseudouto...@gmail.com wrote: [snip] Sorry to reply again, but I have some further information. I used chpass to change the shell of the jailuser account. I tried /bin/sh, /bin/csh, /bin/tcsh, and /sbin/nologin. All of those gave the same

Re: Jails: /bin/tcsh: Permission Denied

2009-10-05 Thread APseudoUtopia
On Mon, Oct 5, 2009 at 9:28 AM, Glen Barber glen.j.bar...@gmail.com wrote: On Mon, Oct 5, 2009 at 1:24 PM, APseudoUtopia apseudouto...@gmail.com wrote: [snip] Sorry to reply again, but I have some further information. I used chpass to change the shell of the jailuser account. I tried

Re: Jails: /bin/tcsh: Permission Denied

2009-10-05 Thread Glen Barber
On Mon, Oct 5, 2009 at 1:30 PM, APseudoUtopia apseudouto...@gmail.com wrote: On Mon, Oct 5, 2009 at 9:28 AM, Glen Barber glen.j.bar...@gmail.com wrote: On Mon, Oct 5, 2009 at 1:24 PM, APseudoUtopia apseudouto...@gmail.com wrote: [snip] Sorry to reply again, but I have some further

Re: Jails: /bin/tcsh: Permission Denied

2009-10-05 Thread Glen Barber
On Mon, Oct 5, 2009 at 1:33 PM, Glen Barber glen.j.bar...@gmail.com wrote: [snip] jailuser:*:1001:1001:User :/home/jailuser:/bin/false # su jailuser su: /bin/false: Permission denied Also, check the permissions on /home/jailuser -- Glen Barber

Re: Jails: /bin/tcsh: Permission Denied

2009-10-05 Thread APseudoUtopia
On Mon, Oct 5, 2009 at 4:08 AM, APseudoUtopia apseudouto...@gmail.com wrote: Hey list, I'm setting up jails on my system. I started with a httpd jail for nginx and php to run in. I used ezjail to create it. I went through all the steps, and got a jail setup and working. I've logged in and

Re: Jails: /bin/tcsh: Permission Denied

2009-10-05 Thread Oliver Fromme
APseudoUtopia wrote: Thanks for the tips. I'm new to jails, and I didn't think it was possible to build a jail without tcsh. What shell do you use then? Just /bin/sh? I never log into a jail. There's no reason to do that. However, usually /bin/sh is required to run scripts, cron jobs

Re: Jails: /bin/tcsh: Permission Denied

2009-10-05 Thread Oliver Fromme
APseudoUtopia apseudouto...@gmail.com wrote: The permissions on the HOST for /usr/jails/httpd and /usr/jails/basejail were set incorrectly. When I installed the jail, I used umask 0077. You should _never_ have umask 077 as root. It will cause all kinds of weird problems. It's best to keep

Re: Jails and common ports

2008-11-20 Thread Mel
On Thursday 20 November 2008 23:33:30 Marcus I. Ryan wrote: However, I started hitting issues with libtool and friends. The children would not find them, and would go ahead and start installing their own local copies of those ports. Turns out quite a few tools are defined in /usr/ports/Mk/*

Re: Jails, IPs and identd

2008-08-05 Thread doug
On Tue, 5 Aug 2008, Redd Vinylene wrote: Hello! I have a jail with multiple IPs. It runs identd, however it only works from the jail's main IP: auth stream tcp nowait root internal auth -r -f -n -o UNKNOWN -t 30 How do I make it work from absolutely all IPs? Perhaps: auth stream tcp

Re: Jails, IPs and identd

2008-08-05 Thread Redd Vinylene
Yeah but I'm using Bjoern Zeeb's multiple IP patch... On Tue, Aug 5, 2008 at 4:43 PM, doug [EMAIL PROTECTED] wrote: On Tue, 5 Aug 2008, Redd Vinylene wrote: Hello! I have a jail with multiple IPs. It runs identd, however it only works from the jail's main IP: auth stream tcp nowait root

Re: Jails, IPs and identd

2008-08-05 Thread Redd Vinylene
On Tue, Aug 5, 2008 at 6:02 PM, [EMAIL PROTECTED] wrote: ah - above my pay grade. On Tue, 5 Aug 2008, Redd Vinylene wrote: Yeah but I'm using Bjoern Zeeb's multiple IP patch... On Tue, Aug 5, 2008 at 4:43 PM, doug [EMAIL PROTECTED] wrote: On Tue, 5 Aug 2008, Redd Vinylene wrote:

Re: Jails and IP Aliasing

2008-07-08 Thread Matthew Seaman
Jason Morgan wrote: On 2008.07.07 12:16:44, David Allen wrote: # grep fxp0 /etc/rc.conf ifconfig_fxp0=inet 10.0.1.2 netmask 0xff00 ifconfig_fxp0_alias0=10.0.1.3 netmask 0x ifconfig_fxp0_alias1=10.0.1.4 netmask 0x ifconfig_fxp0_alias2=10.0.1.5 netmask 0x My

Re: Jails and IP Aliasing

2008-07-08 Thread Ivailo Tanusheff
Tanusheff Deputy Head of IT Department ProCredit Bank (Bulgaria) AD Jason Morgan [EMAIL PROTECTED] Sent by: [EMAIL PROTECTED] 07.07.2008 21:01 To FreeBSD Questions freebsd-questions@freebsd.org cc Subject Re: Jails and IP Aliasing Hello, On 2008.07.07 09:51:33, David Allen wrote

Re: Jails and IP Aliasing

2008-07-08 Thread Mel
On Monday 07 July 2008 18:51:33 David Allen wrote: Granted, everything is really happening over the loopback address, but a connection originating from the jailhost to a jail should appear to be using the jailhost's IP address, or so I'd like to think. If it doesn't, then the scenario is

Re: Jails and IP Aliasing

2008-07-08 Thread Mel
On Tuesday 08 July 2008 11:13:04 Ivailo Tanusheff wrote: Hi, I guess the problem is with your netmask and respectivly the broadcast adrresses for the jails. It should be: inet 10.0.1.2 netmask 0xff00 broadcast 10.0.1.255 inet 10.0.1.3 netmask 0xff00 broadcast 10.0.1.255 inet

Re: Jails and IP Aliasing

2008-07-08 Thread Ivailo Tanusheff
To freebsd-questions@freebsd.org cc Subject Re: Jails and IP Aliasing On Tuesday 08 July 2008 11:13:04 Ivailo Tanusheff wrote: Hi, I guess the problem is with your netmask and respectivly the broadcast adrresses for the jails. It should be: inet 10.0.1.2 netmask 0xff00 broadcast

Re: Jails and IP Aliasing

2008-07-08 Thread David Allen
On Mon, Jul 7, 2008 at 2:01 PM, George Hartzell [EMAIL PROTECTED] wrote: Did you take the necessary steps to restrict the IP addresses on which sendmail on the host and the jail listen? The jail man page only says: I don't think anyone would get too far with jails in general if the jail host

Re: Jails and IP Aliasing

2008-07-08 Thread David Allen
On Tue, Jul 8, 2008 at 2:24 AM, Mel [EMAIL PROTECTED] wrote: On Monday 07 July 2008 18:51:33 David Allen wrote: Granted, everything is really happening over the loopback address, but a connection originating from the jailhost to a jail should appear to be using the jailhost's IP address, or

Re: Jails and IP Aliasing

2008-07-08 Thread Matthew Seaman
David Allen wrote: There was a post recently (Matthew Seaman's name comes to mind) that suggested binding jails to addresses in the loopback range and then using firewall rules to redirect the traffic accordingly. There's a possibility that may help in this case, but that layer of added

Re: Jails and IP Aliasing

2008-07-08 Thread Daniel Gerzo
Hello, * Something like a loopback address inside the jail. It may be 127.0.0.2 instead of 127.0.0.1 but most software can be persuaded to use it for loopback style things. * The ability to map several IPs onto the jailed system by use of NAT and redirect within

Re: Jails and IP Aliasing

2008-07-08 Thread Chris St Denis
Daniel Gerzo wrote: Hello, * Something like a loopback address inside the jail. It may be 127.0.0.2 instead of 127.0.0.1 but most software can be persuaded to use it for loopback style things. * The ability to map several IPs onto the jailed system by use of NAT and

Re: Jails and IP Aliasing

2008-07-08 Thread Mel
On Tuesday 08 July 2008 11:24:33 Mel wrote: On Monday 07 July 2008 18:51:33 David Allen wrote: Granted, everything is really happening over the loopback address, but a connection originating from the jailhost to a jail should appear to be using the jailhost's IP address, or so I'd like to

Re: Jails and IP Aliasing

2008-07-08 Thread David Allen
On Tue, Jul 8, 2008 at 9:35 AM, Matthew Seaman [EMAIL PROTECTED] wrote: David Allen wrote: There was a post recently (Matthew Seaman's name comes to mind) that suggested binding jails to addresses in the loopback range and then using firewall rules to redirect the traffic accordingly.

Re: Jails and IP Aliasing

2008-07-07 Thread Jason Morgan
Hello, On 2008.07.07 09:51:33, David Allen wrote: Unless I'm losing my mind, I'm encountering what seems to yet another gotcha with jails. The following has been dumbed down for clarity and brevity. - # hostname

Re: Jails and IP Aliasing

2008-07-07 Thread David Allen
On Mon, Jul 7, 2008 at 10:54 AM, Jason Morgan [EMAIL PROTECTED] wrote: On 2008.07.07 09:51:33, David Allen wrote: Unless I'm losing my mind, I'm encountering what seems to yet another gotcha with jails. The following has been dumbed down for clarity and brevity.

Re: Jails and IP Aliasing

2008-07-07 Thread Jason Morgan
On 2008.07.07 12:16:44, David Allen wrote: On Mon, Jul 7, 2008 at 10:54 AM, Jason Morgan [EMAIL PROTECTED] wrote: On 2008.07.07 09:51:33, David Allen wrote: Unless I'm losing my mind, I'm encountering what seems to yet another gotcha with jails. The following has been dumbed down for

Re: Jails and IP Aliasing

2008-07-07 Thread George Hartzell
Did you take the necessary steps to restrict the IP addresses on which sendmail on the host and the jail listen? The jail man page only says: To configure sendmail(8), it is necessary to modify /etc/mail/sendmail.cf. but you'll probably end up adjusting the DAEMON_OPTIONS lines of

Re: Jails and multicore boxes

2007-11-16 Thread Norberto Meijome
On Wed, 14 Nov 2007 19:20:06 +0100 Erik Cederstrand [EMAIL PROTECTED] wrote: You'll have to answer that yourself. How valuable is your data? What are you trying to protect? If you're worrying about getting cracked and used as a spam bot, jails are no more secure than a non-jail system.

Re: Jails and multicore boxes

2007-11-16 Thread Federico Lorenzi
On Nov 16, 2007 6:57 AM, Norberto Meijome [EMAIL PROTECTED] wrote: On Wed, 14 Nov 2007 19:20:06 +0100 Erik Cederstrand [EMAIL PROTECTED] wrote: You'll have to answer that yourself. How valuable is your data? What are you trying to protect? If you're worrying about getting cracked and used

Re: jails in 6.3 and 7.0

2007-11-15 Thread Nikos Vassiliadis
On Wednesday 14 November 2007 20:24:14 Erik Cederstrand wrote: Jonathan Horne wrote: I was reading a while back that the jails tcp system was getting an overhaul, possibly in the 7.0 release. I don't remember all the particulars, but things along the lines to make jails function even

Re: Jails and multicore boxes

2007-11-14 Thread Erik Cederstrand
Matt Fioravante wrote: I've heard that things like freebsd jails or solaris zones can still be insecure on multicore boxes because a race condition can occur. I don't know more details about it other than that. Is this true now on freebsd? There's always the possibility that a bug exists which

Re: jails in 6.3 and 7.0

2007-11-14 Thread Erik Cederstrand
Jonathan Horne wrote: I was reading a while back that the jails tcp system was getting an overhaul, possibly in the 7.0 release. I don't remember all the particulars, but things along the lines to make jails function even more like a real (independant) system. I believe one of the improvments

Re: jails in 6.3 and 7.0

2007-11-14 Thread Kris Kennaway
Jonathan Horne wrote: I was reading a while back that the jails tcp system was getting an overhaul, possibly in the 7.0 release. I don't remember all the particulars, but things along the lines to make jails function even more like a real (independant) system. I believe one of the

Re: Jails and freebsd-update

2007-10-09 Thread Vinny
Boris Samorodov wrote: Seems that you are looking for sysutils/ezjail. WBR Thank you for the reference. That is a very nice port. I will definitely make use of it when I need multiple jails (3). I only need 2 at the moment. I did a little more digging and it seems that I can install a

Re: Jails and freebsd-update

2007-10-08 Thread Boris Samorodov
On Sun, 07 Oct 2007 18:13:34 -0400 Vinny wrote: I'm setting up a server for mail and web. I want to put each in their own jail on a host system. I have installed 6.2-Release on the host and successfully used freebsd-update to grab up to -p8. So far so good. Now, I was going to install

Re: Jails not being assigned IP address?

2006-12-07 Thread Matt Bostock
I have three jails on one machine that won't resolve DNS because it looks as though the jails themselves aren't being assigned IP addresses. In the end, I tried just rebooting the host, which fixed the problem. Thanks to Tom for emailing me :-) Best regards, Matt

Re: jails or chroot?

2006-05-10 Thread Iantcho Vassilev
On 5/9/06, Chad Leigh -- Shire.Net LLC [EMAIL PROTECTED] wrote: On May 9, 2006, at 5:53 AM, Michael Grant wrote: When it comes time to upgrade, how does one upgrade 100 different jails? This will be a nightmare! Actually, not. You only need 1 master jail and a bunch of nullfs read only

Re: jails or chroot?

2006-05-10 Thread Chad Leigh -- Shire.Net LLC
On May 10, 2006, at 2:33 AM, Iantcho Vassilev wrote: On 5/9/06, Chad Leigh -- Shire.Net LLC [EMAIL PROTECTED] wrote: On May 9, 2006, at 5:53 AM, Michael Grant wrote: When it comes time to upgrade, how does one upgrade 100 different jails? This will be a nightmare! Actually, not. You

Re: jails or chroot?

2006-05-09 Thread Subhro
On 5/9/06, Michael Grant [EMAIL PROTECTED] wrote: I host a bunch of websites on my box. Recently I had some problems with file access problems with php which caused me to look into putting each of my clients into their own jail or chroot. I have roughly 100 different domains I'd need to split.

Re: jails or chroot?

2006-05-09 Thread Michael Grant
I'll try to be more explicit on my requirements. I'm not worried about mail. I'm mostly worried about web. Each client has a web site with one or more domains. I currently offer them apache+php+mysql+mod_perl+mod_ssl. One of them needs java server pages, tomcat I think. Everyone gets access

Re: jails or chroot?

2006-05-09 Thread Jahilliya
On 5/9/06, Michael Grant [EMAIL PROTECTED] wrote: I host a bunch of websites on my box. Recently I had some problems with file access problems with php which caused me to look into putting each of my clients into their own jail or chroot. I have roughly 100 different domains I'd need to

RE: jails or chroot?

2006-05-09 Thread Philippe Lang
-questions@freebsd.org Objet : Re: jails or chroot? On 5/9/06, Michael Grant [EMAIL PROTECTED] wrote: I host a bunch of websites on my box. Recently I had some problems with file access problems with php which caused me to look into putting each of my clients into their own jail or chroot. I

Re: jails or chroot?

2006-05-09 Thread Anish Mistry
On Tuesday 09 May 2006 08:24, Michael Grant wrote: I'll try to be more explicit on my requirements. I'm not worried about mail. I'm mostly worried about web. Each client has a web site with one or more domains. I currently offer them apache+php+mysql+mod_perl+mod_ssl. One of them needs

Re: jails or chroot?

2006-05-09 Thread Philip Hallstrom
With the inclusion of mergemaster -u subsequent base system upgrades are much less painful. Using null mounts for the common areas should lessen the version sync issues. Once unionfs is stable again, you could just use one jail as a base image and allow the others to be cloned off of that.

Re: jails or chroot?

2006-05-09 Thread Chad Leigh -- Shire.Net LLC
On May 9, 2006, at 5:53 AM, Michael Grant wrote: When it comes time to upgrade, how does one upgrade 100 different jails? This will be a nightmare! Actually, not. You only need 1 master jail and a bunch of nullfs read only mounts plus some exclusive space for each jail.I run 44

Re: Jails CPU / RAM accounting?

2006-04-18 Thread Nicklas B. Westerlund
Philippe Lang wrote: Hi, Hi there, Since there is no way (at least I know of) to limit RAM or CPU in a jail, is there a way to monitor and do some accounting on jails CPU / RAM used? You might want to take a look at login.conf. (perhaps cputime, memoryuse, memorylocked and perhaps

Re: Jails third party services initialization

2006-03-10 Thread Philip Hallstrom
I'm not sure if this is the right forum for this subject, but here it goes. I've been using ezjail tool to deploy some jails on a server but I've noticed that the /usr/local/etc/rc.d/* scripts aren't executed at each jail startup, despite all jails are started normally. On the other hand, the

Re: Jails - nice tcsh promt: set promt = '[EMAIL PROTECTED]:%~%#'

2005-08-08 Thread John Macintosh
Are you sure it's not just the fortune game that's started from your shells rc file? I got this in my .bash_profile which displays a freebsd tip every time I source .bash_profile (eg, every time I log in): [ -x /usr/games/fortune ] /usr/games/fortune freebsd-tips If you have the same line

Re: Jails - nice tcsh promt: set promt = '[EMAIL PROTECTED]:%~%#'

2005-08-08 Thread jdyke
Michael wrote: Hello, I recently tried creating some jails on my FreeBSD 5.4 Release installation. When I try and log into the jail via ssh I get to the login prompt, type my info and once I press enter I get some weird error nice tcsh promt: set promt = '[EMAIL PROTECTED]:%~%#'. I

Re: Jails - nice tcsh promt: set promt = '[EMAIL PROTECTED]:%~%#'

2005-08-08 Thread Benjamin Lutz
When I try and log into the jail via ssh I get to the login prompt, type my info and once I press enter I get some weird error nice tcsh promt: set promt = '[EMAIL PROTECTED]:%~%#'. I realize tcsh is a shell, but why the error... Does anyone know what this is, and how I can fix it? I think

Re: Jails and filesystems

2005-06-11 Thread Björn König
Rob wrote: I'm trying to figure out the best layout for multiple jails. I'd like to share binaries across jails - patches and packages only need to be installed once, and it saves a lot of space. So these directories would be shared and read-only: [...] You can also use mount_unionfs with

Re: Jails ....

2005-03-27 Thread [EMAIL PROTECTED]
On Sun, 27 Mar 2005 11:23:05 -0500 Grant Peel [EMAIL PROTECTED] wrote: It seems to me, that for all the work of scponly shell to be setup, why not just create a simple jail and allow ssh teminal access for users? That having been said, is it possible to set up jails for existing users

Re: jails: am I missing something or..

2004-08-03 Thread Chad Leigh -- Shire.Net LLC
On Jul 25, 2004, at 6:29 AM, Hugo Silva wrote: It is unthinkable to be umount'ing EVERY jail if I want to add one. I need separate filesystems for jails if I want (I *need* to) user quotas on jails If I have separate filesystems, I can't create a new jail while the disk is being used (ie other

Re: jails: am I missing something or..

2004-07-25 Thread Bill Moran
Hugo Silva [EMAIL PROTECTED] wrote: Hi, Ok, so I decided to use jails instead of vmware and try to live with the limitations (only 1 ip address, etc..).. Well, another jail limitation is the impossibility of setting user quotas inside a jail UNLESS the jail has a filesystem on its own

  1   2   >