From owner-freebsd-security Wed Nov 17 15:43:21 1999 Delivered-To: freebsd-security@freebsd.org Received: from gndrsh.dnsmgr.net (GndRsh.dnsmgr.net [198.145.92.4]) by hub.freebsd.org (Postfix) with ESMTP id DB49B1523B; Wed, 17 Nov 1999 15:43:12 -0800 (PST) (envelope-from freebsd@gndrsh.dnsmgr.net) Received: (from freebsd@localhost) by gndrsh.dnsmgr.net (8.9.3/8.9.3) id PAA23345; Wed, 17 Nov 1999 15:40:49 -0800 (PST) (envelope-from freebsd) From: "Rodney W. Grimes" Message-Id: <199911172340.PAA23345@gndrsh.dnsmgr.net> Subject: Re: Should jail treat ip-number? In-Reply-To: <38333989.9C4A0383@vangelderen.org> from "Jeroen C. van Gelderen" at "Nov 18, 1999 00:26:01 am" To: jeroen@vangelderen.org (Jeroen C. van Gelderen) Date: Wed, 17 Nov 1999 15:40:49 -0800 (PST) Cc: phk@critter.freebsd.dk (Poul-Henning Kamp), shin@nd.net.fujitsu.co.jp (Yoshinobu Inoue), beyssac@enst.fr, freebsd-hackers@FreeBSD.ORG, freebsd-security@FreeBSD.ORG X-Mailer: ELM [version 2.4ME+ PL54 (25)] MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org > Poul-Henning Kamp wrote: > > >-Jail(2) specify "ip_number" and/or "ip6_number" into the kernel. > > > > Well, I guess we want it to be "and", right ? Will people want to > > bind both a IPv4 and IPv6 address (does it make sense to do so ?) > > or will people only need to bind one of them ? > > What about multiple IPv6 or IPv4 addresses per jail? It might be a > good idea while Inoue-san is at it. Or is this an incredibly stupid > question? I don't know how technically difficult it would be to allow multiple IPv4 and IPv6 addresses per jail, but I can think of a few very good things to do with it. I spend a fair amount of time playing with routing protocols and it would be wonderful to be able to create jailed version of gated/zebra/rodscode on the same box and watch them interact. It would probably cut the size of my hardware lab used for this now in half or maybe even quarter it! -- Rod Grimes - KD7CAX @ CN85sl - (RWG25) rgrimes@gndrsh.dnsmgr.net To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message