Search results

  1. W

    Jail loopback interface question

    I don't think it's a non-issue. Jails were apparently designed to do this. It seems they are designed to allow you to share a single IP between multiple jails, but not multiple IP's ( you can't use two IP's on a jail that is using the same IP as another jail). I don't see why they would...
  2. W

    Jail loopback interface question

    Under normal circumstances you're right. (Where jails don't share the same IP.) Under the circumstances I describe, what I said happens happens. I've tried it on two fresh installs, go try it. Install freebsd FreeBSD and set the IP on one of your interfaces to something, let's say...
  3. W

    Jail loopback interface question

    Let's say the host is 192.168.1.1 has sshd running on port 22. Create a new jail running on 192.168.1.1 and set ssh to run on port 2222. If you are in the jail and do: ssh 127.0.0.1 it will log into the host. If you are logged into the host and do ssh -p 2222 127.0.0.1 it will not log into...
  4. W

    Jail loopback interface question

    I was curious whether or not it was possible to run a jail on the same IP as the base system, so I decided to try it. I was able to get dns/bind99 and net/isc-dhcp42-server installed and working in the jail but I noticed that the loopback device seems to point to the host system. I was...
  5. W

    FreeBSD 10 b3 linker errors in net/samba4 and dns/bind99

    After talking to someone in #samba, I figured out how to get past this error on BIND99, but I'm still stuck on Samba4. There is a patch for GSSAPI at /usr/ports/dns/samba-nsupdate/files/patch-configure.in Also, you need to add the following to Makefile: USE_AUTOTOOLS= autoconf autoheader...
  6. W

    FreeBSD 10 b3 linker errors in net/samba4 and dns/bind99

    I've been trying to get Samba4 to build correctly on 10 for several days. I seem to be getting linker errors but I do not know enough about these to debug or fix them. I thought perhaps something in my make.conf was causing it so I cleared it. When that didn't work, I thought maybe it was one of...
  7. W

    transparent proxy in jail with pf in host

    This works on my system where I have pf as the firewall/NAT and a jail with Squid configured to run transparent. You will need a redirect rule in your /etc/pf.conf. Here is an example: rdr on $Int_if inet proto tcp from $Int_if:network to any port http -> 10.0.0.1 port 3128 This assumes your...
  8. W

    devfs.conf not working in jail

    Nice find brother. This totally fixed my issue. No more using crontab with an @reboot rule.
  9. W

    devfs.conf not working in jail

    It still doesn't seem to work when I change it to 4.
  10. W

    Proper configuration for jails and routing table?

    I've seen logs on the host system with IP mappings appearing to originate from the jail IP, when in fact they originated from 127.0.0.1 or 192.168.1.1. I'm also having an issue where munin-node running inside of the jail appeared to have the same data as munin-node running on the host system. (I...
  11. W

    Proper configuration for jails and routing table?

    I am running two jails on lo1 which I created using cloned_interfaces in my /etc/rc.conf. Here is the valid section of my /etc/rc.conf cloned_interfaces="lo1" ifconfig_lo1="inet 10.0.0.1 netmask 255.255.255.255" ifconfig_lo1_alias0="inet 10.0.0.2 netmask 255.255.255.255" When I run netstat...
  12. W

    devfs.conf not working in jail

    I changed my ruleset to "200" which seems to have worked in the sense that the jail file SAYS it worked. I see the following in /var/run/jail.squidjail.conf: squidjail { host.hostname = "squidjail"; path = "/usr/jails/squidjail"; ip4.addr += "10.0.0.1/32"...
  13. W

    devfs.conf not working in jail

    I'm reopening this thread because I have the same problem in FreeBSD 10. (I'm pretty sure it's due to a different reason, but the effect is the same) I'm using ezjails. My setup is the same as above, with a /etc/devfs.rules and the proper settings in my ezjails script. I found the following...
  14. W

    pkgng database failure.

    I upgraded to the new pkgng system and somehow something went wrong installing a package. I now have a malformed database and have no idea how to fix it. [root@router /var/db/pkg]# pkg search curl pkg: sqlite: database disk image is malformed (pkgdb.c:3069) pkg: Unable to query repository...
  15. W

    munin-node netstat plugin error

    I installed munin-node today and I found that the netstat plugin doesn't work. I was wondering if anyone knew a solution for this problem. Here is the relevant information from the logs. 2013/10/31-20:20:05 [34196] netstat: option requires an argument -- I 2013/10/31-20:20:05 [34196]...
  16. W

    devfs.conf not working in jail

    All I know is that if I don't use /etc/devfs.rules and add this: [devfsrules_squidjail=4] add include $devfsrules_hide_all add include $devfsrules_unhide_basic add include $devfsrules_unhide_login add path 'pf' unhide mode 0640 group squid unhide Transparent Squid works inside of the jail...
  17. W

    devfs.conf not working in jail

    I finally figured it out. I needed to set it like this: add path 'pf' unhide mode 0640 group squid unhide
  18. W

    devfs.conf not working in jail

    I think I may have figured it out. When I do the following command: sysctl security | grep jail I notice this: security.jail.mount_devfs_allowed: 0 I'm going to try to change this and see if it works. edit: It didn't change anything. I'm still having the same issue.
  19. W

    devfs.conf not working in jail

    It looks like I already have that set in the host system: [devfsrules_squidjail=4] add include $devfsrules_hide_all add include $devfsrules_unhide_basic add include $devfsrules_unhide_login add path 'pf' unhide Also, to be clear, /dev/pf shows up inside the jail, it just doesn't have the...
  20. W

    devfs.conf not working in jail

    I have a system with ezjails installed and I have enabled the following: export jail_squidjail_devfs_enable="YES" export jail_squidjail_devfs_ruleset="devfsrules_jail" In the jail, I've edited /etc/devfs.conf with the following: #pf own pf root:100 perm pf 0640 I need these options in...
Back
Top