Re: jail

From: alexus (ml@db.nexgen.com)
Date: 11/05/01


From: "alexus" <ml@db.nexgen.com>
To: <cjclark@alum.mit.edu>
Date: Mon, 5 Nov 2001 02:54:16 -0500

how else should i set it up then?

my jail users seems to be really in jail :)

i mean they can't go outside of jail to evil internet:] they can't browse
they can't telnet/ssh outside they can't use irc nothing

any ideas?

----- Original Message -----
From: "Crist J. Clark" <cristjc@earthlink.net>
To: "alexus" <ml@db.nexgen.com>
Cc: <freebsd-security@FreeBSD.ORG>
Sent: Monday, November 05, 2001 1:32 AM
Subject: Re: jail

> On Sun, Nov 04, 2001 at 07:55:38PM -0500, alexus wrote:
> > does jail require to have NAT set up in order for jail users to go
outside
> > of jail (like browse, telneting out and etc..)
>
> No.
> --
> Crist J. Clark | cjclark@alum.mit.edu
> | cjclark@jhu.edu
> http://people.freebsd.org/~cjc/ | cjc@freebsd.org
>
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-security" in the body of the message
>

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message



Relevant Pages

  • Re: Some questions about jails
    ... You don't need to start a jail with procfs, ... > network card present in the host system? ... > one jail's purpouses is to fool the jail users, ...
    (freebsd-hackers)
  • jail
    ... does jail require to have NAT set up in order for jail users to go outside ... of jail (like browse, telneting out and etc..) ... with "unsubscribe freebsd-security" in the body of the message ...
    (FreeBSD-Security)
  • Re: jail
    ... > does jail require to have NAT set up in order for jail users to go outside ... telneting out and etc..) ...
    (FreeBSD-Security)
  • Unable to connect to jail
    ... I have given my network card an alias using ... of my jail which is acting as an ftp server but I am unable to ping it from ... with "unsubscribe freebsd-security" in the body of the message ...
    (FreeBSD-Security)
  • RE: jail and NFS
    ... the user being in a jail, due to the way in which jail is implemented. ... Hiding the nature of the host environment, ... a much better job of limiting information leak into jail, btw, than ... with "unsubscribe freebsd-security" in the body of the message ...
    (FreeBSD-Security)