Re: Configuring JAIL to bind on lo0 interface

From: Ilya Kiselyov (list_at_ostankino.ru)
Date: 12/19/03

  • Next message: Lawrence Sica: "Re: Configuring JAIL to bind on lo0 interface" 
    Date: Fri, 19 Dec 2003 20:13:41 +0300
To: freebsd-security@freebsd.org

    Hello!

    > > > Can anybody help me with that problem. For now i set it up on external IP
    > > > and everythig is okej. But i want to have this jail on diffrent iface that
    > > > is not an external iface and is set for example on 127.0.0.10.
    > >
    > > You should probably use a real ip for jail, not from 127.0.0.0/8.
    > >
    >
    > So there is no chance to set it up on 127.0.0.0/8 and have access to
    > internet ? I wanted to have some daemons listenig on aliased IP on lo0
    > iface. And then set up few rules on firewall to forward traffic from external
    > IP to those ip on lo0 interface.

    In case you just want it to be on lo0, you can set up a real ip alias on lo0. If you need both lo0 AND 127.0.0.0/8... Well, do you _really_ need such a configuration? 

    -- 
  Regards, Ilya
_______________________________________________
freebsd-security@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-security
To unsubscribe, send any mail to "freebsd-security-unsubscribe@freebsd.org"
  • Next message: Lawrence Sica: "Re: Configuring JAIL to bind on lo0 interface"

    Relevant Pages

    • Re[2]: packet order, ipf or ipfw (offtopic)
      ... Is there any chance to see one day pf for 4.X-RELEASE? ... thinking pf is the best firewall ever made but it is very frustrated i ... just a question of free time? ... To unsubscribe, ...
      (freebsd-net)
    • Re: Media Center Extender gives error code 2003
      ... >> came with the standard HP harddisk image). ... >> Other than that I was relying on the firewall in my broadband router which I ... On the odd chance that the HP harddisk ... I reviewed all the processes that are running in the task manager. ...
      (microsoft.public.windows.mediacenter)
    • Re: Recommendation withdrawn for Symantec products
      ... A firewall software package must be installed on a OS, ... in the configuration and any security issues with the OS. ... the installation options are controlled by the user. ... very little chance of inducing a security issue at this point. ...
      (alt.computer.security)
    • Re: Zone Alarm- any forewarnings?
      ... And what is the chance ... if you have no protection? ... If it will, then Wolfgang is wrong, right? ... Maximum PC- which strongly recommended a good firewall, ...
      (comp.security.firewalls)
    • Re: Large Zip files in Internet Logs folder...
      ... I actually meant that there is a good chance that you could safely get ... rid of both the files _and_ ZA. ... Thanks again so much for your response to my last query. ... have layed out a logical and easy to understand approach to the firewall ...
      (comp.security.firewalls)