Re: Problems with JAIL in 4.8R

From: stakys (stakys_at_punktas.lt)
Date: 08/05/03

  • Next message: Hernan Nunez: "Re: Problems with JAIL in 4.8R"
    To: <hnunez@vianetworks.com.ar>, <freebsd-security@freebsd.org>
    Date: Tue, 5 Aug 2003 18:41:47 +0300
    
    

    I've tried in debug mode but do not gives any error when i get the timeout,
    also my netmask set as you said. Any ideas how to solve it?
    ----- Original Message -----
    From: "Hernan Nunez" <hnunez@vianetworks.com.ar>
    To: <freebsd-security@freebsd.org>
    Sent: Tuesday, August 05, 2003 5:48 PM
    Subject: Re: Problems with JAIL in 4.8R

    > Try using sshd in debug mode [SSHD(8)]. Inside the jail run sshd -ddd,
    > setting up ListenAddress jail.ip.addr in your sshd_config .,.,
    >
    > Tip:
    > If you are using , in your jail, an ip addr (alias address) from the same
    > network than outside you must use a host mask 255.255.255.255 in your
    alias
    > addrs.,.,
    >
    > Hernan
    >
    >
    > ----- Original Message -----
    > From: "stakys" <stakys@punktas.lt>
    > To: "Konstantin M Volevatch" <cox@rosnet.ru>;
    <freebsd-security@freebsd.org>
    > Sent: Tuesday, August 05, 2003 10:45 AM
    > Subject: Re: Problems with JAIL in 4.8R
    >
    >
    > > Didn't help. Any more suggesstions about solving this problem?
    > > ----- Original Message -----
    > > From: "Konstantin M Volevatch" <cox@rosnet.ru>
    > > To: <stakys@punktas.lt>; <freebsd-security@freebsd.org>
    > > Sent: Tuesday, August 05, 2003 3:31 PM
    > > Subject: Re: Problems with JAIL in 4.8R
    > >
    > >
    > > > Try this:
    > > > ipfw add 52 allow ip from any to me via rl0
    > > >
    > > > В сообщении от 5 Август 2003 17:20 stakys@punktas.lt написал:
    > > > > On Tue, Aug 05, 2003 at 12:56:36PM -0000, stakys@punktas.lt wrote:
    > > > > > Hi, i've set the outside ip for the jail..It works.. When i try to
    > ssh
    > > to
    > > > > > jail'ed system from the main system (in which is created jail) the
    > > > > > connection is successful, but when i try to connect to jailed
    system
    > > from
    > > > > > anywhere else i get this message:
    > > > > > ssh: connect to host IP_NUMBER port 22: Operation timed out
    > > > > > What can be wrong here? How to solve this problem?
    > > > > >
    > > > > >>Are you running some sort of firewall on the main system? You
    might
    > > > > >>have to add additional rules allowing SSH into the jailed one...
    > > > > >>
    > > > > >>G'luck,
    > > > > >>Peter
    > > > >
    > > > > I'm running IPFW but i put such a lines to ipfw.rules to be sure
    that
    > > it's
    > > > > not firewall's fault, about connecting to jail'ed system from
    outside.
    > > > > Here are the lines:
    > > > > ipfw add 50 allow ip from any to any via lo0
    > > > > ipfw add 51 allow ip from any to any via rl0
    > > > > _______________________________________________
    > > > > freebsd-security@freebsd.org mailing list
    > > > > http://lists.freebsd.org/mailman/listinfo/freebsd-security
    > > > > To unsubscribe, send any mail to
    > > "freebsd-security-unsubscribe@freebsd.org"
    > > >
    > > > --
    > > > Konstantin M. Volevatch <cox@rosnet.ru>
    > > > Internet Service Division, RosNet JSC, Moscow
    > > > (095) 7813332 [local:4341]
    > > >
    > >
    > > _______________________________________________
    > > freebsd-security@freebsd.org mailing list
    > > http://lists.freebsd.org/mailman/listinfo/freebsd-security
    > > To unsubscribe, send any mail to
    > "freebsd-security-unsubscribe@freebsd.org"
    > >
    >
    > _______________________________________________
    > freebsd-security@freebsd.org mailing list
    > http://lists.freebsd.org/mailman/listinfo/freebsd-security
    > To unsubscribe, send any mail to
    "freebsd-security-unsubscribe@freebsd.org"

    _______________________________________________
    freebsd-security@freebsd.org mailing list
    http://lists.freebsd.org/mailman/listinfo/freebsd-security
    To unsubscribe, send any mail to "freebsd-security-unsubscribe@freebsd.org"


  • Next message: Hernan Nunez: "Re: Problems with JAIL in 4.8R"

    Relevant Pages

    • Re: Problems with JAIL in 4.8R
      ... Problems with JAIL in 4.8R ... > also my netmask set as you said. ... To unsubscribe, ...
      (FreeBSD-Security)
    • Re: k3b cant burn audio CD, got a few coasters today
      ... cdrecord: 1.1.11 ... cmd finished after 148.975s timeout 200s ... Writing time: 169.988s ... To UNSUBSCRIBE, email to debian-user-REQUEST@xxxxxxxxxxxxxxxx ...
      (Debian-User)
    • Re: setup the PMU to generate an interrupt on x number of LLC misses
      ... always possible to read the file descriptor; it just sounds like in your ... Will use the timeout value stored in tv, which you have set to rate * ... Have you ever gotten valid data out of the file handle when not using ... To UNSUBSCRIBE, email to debian-user-REQUEST@xxxxxxxxxxxxxxxx ...
      (Debian-User)
    • Re: Tuning HZ for semi-realtime applications
      ... and uses its timeout parameter to try to keep the timing consistent. ... as you try to connect to systems that are a moderate round trip time away. ... SH>To unsubscribe, ...
      (freebsd-hackers)
    • Re: how to keep the internet awak
      ... so it finally was a "timeout" problem? ... I guess it might due to the suspend, the IP of my laptop has changed. ... To UNSUBSCRIBE, email to debian-user-REQUEST@xxxxxxxxxxxxxxxx ... Trouble? ...
      (Debian-User)