Re: Configuring JAIL to bind on lo0 interface

From: GiZmen (gizmen_at_blurp.one.pl)
Date: 12/20/03

  • Next message: Bruce M Simpson: "Re: Configuring JAIL to bind on lo0 interface"
    Date: Sat, 20 Dec 2003 02:42:31 +0100
    To: freebsd-security@FreeBSD.ORG
    
    

    > As i understood your problem you need addition alias on lo0 interface
    > for gateway ip purpose. So you have lo0 interface and lo0_alias0
    > 192.168.1.1 as default gateway for jails. And now you create new jails'
    > ip as aliases on lo0 iface.
    >
    > For example:
    >
    > no jail, only gateway - lo0_alias0 192.168.1.1/24
    >
    > jail1 - lo0_alias1 192.168.1.2/24 - hostname jail1.domain.com
    > in this jail set default gateway to 192.168.1.1
    >
    > jail2 - lo0_alias2 192.168.1.3/24 - hostname jail2.domain.com
    > in this jail set default gateway to 192.168.1.1 also
    >
    > Your host machine have to be gateway enabled.
    >
    > Now if you want to switch on internet access from jail1 you only need to
    > add nat rule to translate jail1's ip to the host primary ip.
    >
    > Alesha.

    I dont know how can it work? AFAIK in jail i cant change the default
    gateway.

    -- 
    Best Regards:
    		GiZmen
    _______________________________________________
    freebsd-security@freebsd.org mailing list
    http://lists.freebsd.org/mailman/listinfo/freebsd-security
    To unsubscribe, send any mail to "freebsd-security-unsubscribe@freebsd.org"
    

  • Next message: Bruce M Simpson: "Re: Configuring JAIL to bind on lo0 interface"

    Relevant Pages

    • Re: How to use two interface with jail
      ... all traffic from the server/for the server pass through the first ... all traffic from the jail /for the jail pass through the second ... interface. ... if1: 192.168.1.1, gateway 192.168.1.254 ...
      (freebsd-questions)
    • Re: Adding a default route for a specific NIC
      ... The jail I've setup will serve sites on various IP addresses. ... there is a gateway machine that's setup to NAT ... > the traffic out to the internet. ...
      (freebsd-questions)
    • Re: How to use two interface with jail
      ... all traffic from the server/for the server pass through the first ... all traffic from the jail /for the jail pass through the second ... interface. ... if1: 192.168.1.1, gateway 192.168.1.254 ...
      (freebsd-questions)
    • Re: Configuring JAIL to bind on lo0 interface
      ... >> and everythig is okej. ... But i want to have this jail on diffrent iface that ... > You should probably use a real ip for jail, ... IP to those ip on lo0 interface. ...
      (FreeBSD-Security)