Hello everyone.
I'm trying to build jail environment on a new server with 10.1-R/amd64. I've done that before on 9.2-R, but now I'm stuck with strange network problem: no matter how I configure jail (old way through rc.conf jail_* variables or via /etc/jail.conf), i don't see default gateway in jail's routing table. At first I started with more complex config using separate fib for jail, but it's not working even without fibs (or in fib 0). So, here's what I have in the host system:
I can ping internet from a host via gateway 10.1.1.1.
And here's what I have in jail:
I can ping gateway from jail.
But not the Internet or anything via routing.
There are no default route in jail - why? What have i missed in this new jail implementation since 9.2-R?
I've tried to make jails by handbook example with ezjail and got the same situation: no default route.
UPD: it's all my fault, firewall on 10.1.1.1 didn't pass jail's address. I think this thread can be safely removed.
I'm trying to build jail environment on a new server with 10.1-R/amd64. I've done that before on 9.2-R, but now I'm stuck with strange network problem: no matter how I configure jail (old way through rc.conf jail_* variables or via /etc/jail.conf), i don't see default gateway in jail's routing table. At first I started with more complex config using separate fib for jail, but it's not working even without fibs (or in fib 0). So, here's what I have in the host system:
Code:
# netstat -rn
Routing tables
Internet:
Destination Gateway Flags Netif Expire
default 10.1.1.1 UGS em0.4
10.1.1.0/24 link#4 U em0.4
10.1.1.205 link#4 UHS lo0
10.1.1.206 link#4 UHS lo0
127.0.0.1 link#3 UH lo0
127.0.0.2 link#3 UH lo0
# ifconfig
em0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500
options=4219b<RXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING,VLAN_HWCSUM,TSO4,WOL_MAGIC,VLAN_HWTSO>
ether 00:30:48:c1:e1:b4
nd6 options=29<PERFORMNUD,IFDISABLED,AUTO_LINKLOCAL>
media: Ethernet autoselect (1000baseT <full-duplex>)
status: active
lo0: flags=8049<UP,LOOPBACK,RUNNING,MULTICAST> metric 0 mtu 16384
options=600003<RXCSUM,TXCSUM,RXCSUM_IPV6,TXCSUM_IPV6>
inet6 ::1 prefixlen 128
inet6 fe80::1%lo0 prefixlen 64 scopeid 0x3
inet 127.0.0.1 netmask 0xff000000
inet 127.0.0.2 netmask 0xff000000
nd6 options=21<PERFORMNUD,AUTO_LINKLOCAL>
em0.4: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500
options=103<RXCSUM,TXCSUM,TSO4>
ether 00:30:48:c1:e1:b4
inet 10.1.1.205 netmask 0xffffff00 broadcast 10.1.1.255
inet 10.1.1.206 netmask 0xffffff00 broadcast 10.1.1.255
nd6 options=29<PERFORMNUD,IFDISABLED,AUTO_LINKLOCAL>
media: Ethernet autoselect (1000baseT <full-duplex>)
status: active
vlan: 4 parent interface: em0I can ping internet from a host via gateway 10.1.1.1.
And here's what I have in jail:
Code:
====== BOF /etc/jail.conf =========
exec.start = "/bin/sh /etc/rc";
exec.stop = "/bin/sh /etc/rc.shutdown";
mount.devfs;
allow.raw_sockets;
path = "/usr/jails/$name";
template {
jid = 1;
ip4.addr = "em0.4|10.1.1.206/24";
ip4.addr += "lo0|127.0.0.2/8";
host.hostname = template;
}
====== EOF /etc/jail.conf =========
# jexec 1 netstat -rn
Routing tables
Internet:
Destination Gateway Flags Netif Expire
10.1.1.206 link#4 UHS lo0
127.0.0.2 link#3 UH lo0I can ping gateway from jail.
Code:
# jexec 1 ping 10.1.1.1
PING 10.1.1.1 (10.1.1.1): 56 data bytes
64 bytes from 10.1.1.1: icmp_seq=0 ttl=64 time=0.366 ms
^CBut not the Internet or anything via routing.
There are no default route in jail - why? What have i missed in this new jail implementation since 9.2-R?
I've tried to make jails by handbook example with ezjail and got the same situation: no default route.
UPD: it's all my fault, firewall on 10.1.1.1 didn't pass jail's address. I think this thread can be safely removed.