Re: jail w/ inetd

From: alexus (ml@db.nexgen.com)
Date: 10/30/01 

From: "alexus" <ml@db.nexgen.com>
To: "Igor Roshchin" <str@giganda.komkon.org>, <freebsd-security@FreeBSD.ORG>
Date: Tue, 30 Oct 2001 12:36:30 -0500

but if i'll do that then there will be a little conflict.. which someone
going to win

here is my public ip w/ open port 113
also on that public ip i have rule in my firewall to forward all traffic for
port 113 to internal (jail) to port 113

and it doesn't work.. i mean rule itself works.. but ident doesn't work

----- Original Message -----
From: "Igor Roshchin" <str@giganda.komkon.org>
To: <freebsd-security@FreeBSD.ORG>; <ml@db.nexgen.com>
Cc: <freebsd-questions@FreeBSD.ORG>
Sent: Tuesday, October 30, 2001 12:23 PM
Subject: Re: jail w/ inetd

>
>
> All "auth" entries on the first host are commented out.
> Uncomment the one you like/need.
>
> Igor
>
> > From owner-freebsd-security@FreeBSD.ORG Tue Oct 30 02:58:59 2001
> > From: "alexus" <ml@db.nexgen.com>
> > To: <freebsd-security@FreeBSD.ORG>
> > Cc: <freebsd-questions@FreeBSD.ORG>
> > Subject: jail w/ inetd
> > Date: Tue, 30 Oct 2001 02:58:44 -0500
> >
> > Hello
> >
> > sorry for cross posting, i'm not sure whichever list is right for this..
so
> > i'm posting to both
> > you can replay directly to me (without list if you'd like)
> >
> > i just implement jail and some of my users using irc and they need auth
> > (identd)
> >
> > this is not jail host
> >
> > su-2.05# ipfw show 113
> > 00113 79 4239 fwd 172.16.0.9,113 tcp from any to
66.92.98.145
> > 113 in recv fxp0
> > su-2.05# grep auth /etc/inetd.conf
> > # Kerberos authenticated services
> > #auth stream tcp nowait root internal
> > #auth stream tcp6 nowait root internal
> > #auth stream tcp nowait/10/10 root internal
> > auth -r -f -n -o UNKNOWN -t 30
> > #auth stream tcp6 nowait root internal auth -r -f -n -o
> > UNKNOWN -t 30
> > #auth stream tcp wait root /usr/local/sbin/identd
> > identd -w -t120
> > su-2.05# telnet localhost 113
> > Trying ::1...
> > Trying 127.0.0.1...
> >
> > and this is jail host
> >
> > su-2.05# grep auth /etc/inetd.conf
> > # Kerberos authenticated services
> > #auth stream tcp nowait root internal
> > #auth stream tcp6 nowait root internal
> > auth stream tcp nowait root internal auth -r -f -n -o
> > UNKNOWN -t 30
> > #auth stream tcp6 nowait root internal auth -r -f -n -o
> > UNKNOWN -t 30
> > #auth stream tcp wait root /usr/local/sbin/identd
> > identd -w -t120
> > su-2.05# telnet localhost 113
> > Trying ::1...
> > Trying 127.0.0.1...
> > Connected to localhost.
> > Escape character is '^]'.
> >
> > any ideas/suggestions
> >
> > why isn't it working and/or what could be wrong and how to fix it?
> >
> >
> >
> > To Unsubscribe: send mail to majordomo@FreeBSD.org
> > with "unsubscribe freebsd-security" in the body of the message
> >
>

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message

Relevant Pages

  • Re: started playing with jails
    ... I couldn't seem to get it to work -- the Postgres in the ... jail would corrupt the shared memory of the postgres outside the jail. ... the TCP port number it binds to as its SYSV IPC ID... ... different port numbers (and consequentially they will get separate SYSV ...
    (freebsd-questions)
  • Re: Re: jails, ipfilter & stunnel
    ... Now if there is open port outside ... >jail and inside some jail it is opened as well, ... >translate them to jail's ip). ... >for a moment about server keys), your mail server or anything>and get your password for example. ...
    (FreeBSD-Security)
  • Deeper thoughts on jailing my public IP, Re: Do I need JAIL on my home server?
    ... what about the ones I redirect for the jails? ... or only for the jail where the port is ... Only for the jail. ... the route and low level and the firewall runs into the kernel. ...
    (comp.unix.bsd.freebsd.misc)
  • Re: Sendmail and Jails
    ... I was wondering how/where to configure & avoid the port conficts ... instead of running that other sendmail in your host environment run ... it in a jail or only have it bind to a specific IP. ...
    (freebsd-questions)