From owner-freebsd-questions@freebsd.org Wed Nov 4 10:37:05 2015 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id D6525A26569 for ; Wed, 4 Nov 2015 10:37:05 +0000 (UTC) (envelope-from matthew@FreeBSD.org) Received: from smtp.infracaninophile.co.uk (smtp.infracaninophile.co.uk [IPv6:2001:8b0:151:1:3cd3:cd67:fafa:3d78]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.infracaninophile.co.uk", Issuer "infracaninophile.co.uk" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id 69AC61009 for ; Wed, 4 Nov 2015 10:37:05 +0000 (UTC) (envelope-from matthew@FreeBSD.org) Received: from host-4-75.office.adestra.com (vpn-1.adestra.com [46.236.37.122]) (authenticated bits=0) by smtp.infracaninophile.co.uk (8.15.2/8.15.2) with ESMTPSA id tA4Aahp0045764 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128 verify=NO) for ; Wed, 4 Nov 2015 10:36:49 GMT (envelope-from matthew@FreeBSD.org) Authentication-Results: smtp.infracaninophile.co.uk; dmarc=none header.from=FreeBSD.org DKIM-Filter: OpenDKIM Filter v2.10.3 smtp.infracaninophile.co.uk tA4Aahp0045764 Authentication-Results: smtp.infracaninophile.co.uk/tA4Aahp0045764; dkim=none; dkim-atps=neutral X-Authentication-Warning: lucid-nonsense.infracaninophile.co.uk: Host vpn-1.adestra.com [46.236.37.122] claimed to be host-4-75.office.adestra.com Subject: Re: ssh configuration, nmisunderstanding or error To: freebsd-questions@freebsd.org References: <20151104171454.5687fed4@X220.alogt.com> <20151104173313.34de5aa2@X220.alogt.com> From: Matthew Seaman Message-ID: <5639DFB4.2020006@FreeBSD.org> Date: Wed, 4 Nov 2015 10:36:36 +0000 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.11; rv:38.0) Gecko/20100101 Thunderbird/38.3.0 MIME-Version: 1.0 In-Reply-To: <20151104173313.34de5aa2@X220.alogt.com> Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="wBfWVwbRvrvjdudKlHSAifcPkhVaACBV9" X-Virus-Scanned: clamav-milter 0.98.7 at lucid-nonsense.infracaninophile.co.uk X-Virus-Status: Clean X-Spam-Status: No, score=-2.9 required=5.0 tests=ALL_TRUSTED,BAYES_00 autolearn=ham autolearn_force=no version=3.4.1 X-Spam-Checker-Version: SpamAssassin 3.4.1 (2015-04-28) on lucid-nonsense.infracaninophile.co.uk X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 04 Nov 2015 10:37:06 -0000 This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --wBfWVwbRvrvjdudKlHSAifcPkhVaACBV9 Content-Type: text/plain; charset=windows-1252 Content-Transfer-Encoding: quoted-printable On 2015/11/04 09:33, Erich Dollansky wrote: > Yes, there are just there to get an error message depending on the file= > being read. How can ssh get the error message which is supposed to come= > from outside the jail? >=20 > I still believe that I have some very strange error in the setup but I > am not able to see it. sshd in the host system binding to all interfaces (which is the default) will block sshd in the jail from binding to the jail's IP. In fact, it will probably cause sshd to fail to start in the jail. You should have something in your syslog in the jail if that is the case. Make the sshd in your host system bind to specific IP numbers using the 'ListenAddress' parameter. Cheers, Matthew --wBfWVwbRvrvjdudKlHSAifcPkhVaACBV9 Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Comment: GPGTools - https://gpgtools.org iQJ8BAEBCgBmBQJWOd+6XxSAAAAAAC4AKGlzc3Vlci1mcHJAbm90YXRpb25zLm9w ZW5wZ3AuZmlmdGhob3JzZW1hbi5uZXQxOUYxNTRFQ0JGMTEyRTUwNTQ0RTNGMzAw MDUxM0YxMEUwQTlFNEU3AAoJEABRPxDgqeTnFFsQAILyEW61fqem3I5+/eaVw02c oATjPmmmX8kEO48VCJYVGvtbvumjMoBXLTmPxYaq1fc8cseP3lMe9XAmryI8NX6d JIrz4mGJGpIdPrRkJgwI1ZaX1jYyYdGOJJqj5O9xOOjnNqAK9b8+Pknw/o+ssIyX sUWHxB0mDe26zA1ZBSpw539UIP0lL95fhkVTCOA1uBnRNCUMyyBi9ocr+ydfUcID pDVQL737yrdvxcH6NtcW46yKhBd/gWAEDVQJm0g48nUUshNhg459Fg6KRcExQ+4F 2tDIHNbPqO1alCIUpcu2vKW9fm6EQJeafvMNsvqPVVV79GqukPqVlUQAR8Q0RnHn 4SchaSRjBpHFPd2QGGaP/8cEwp8HORhfHIdRWY97E9qqWC6EJGojJSW5sL74ssoh CfE/T7EC9pd1cJFMMNvONZ2LI6/Dekeq29aEb5ZmNfSJYNih461sjNUqdI3TNGsM 2puvXUCOPceT9uS6f2yxfMI+Bk1hdl2v/+deYpIjCoYQ1uLeaPVghg87f5k5y7mE g1shiiZ9KTBVKsTgeKKHt08paXrvhkPzkT5se3JhvVuNvJfVP+zIT131iK/Bgcwe ZxzeiF0MOwkR2Ivn6nxfEvbRWOkUvs0mkJ5qGDG7MaHLUWEoD6HKzjZWKp1iwdPm V/E/+i4VryeDW10r1eE/ =Yxcz -----END PGP SIGNATURE----- --wBfWVwbRvrvjdudKlHSAifcPkhVaACBV9--