Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 28 May 2013 15:14:22 +1000 (EST)
From:      Ian Smith <smithi@nimnet.asn.au>
To:        Mogamat Abrahams <lists@tabits.co.za>
Cc:        freebsd-jail@freebsd.org
Subject:   Re: Cant reach Jailed services from internet.
Message-ID:  <20130528145629.X55451@sola.nimnet.asn.au>
In-Reply-To: <loom.20130527T215634-190@post.gmane.org>
References:  <loom.20130527T091739-282@post.gmane.org> <cc5f425486d0fc06e1ddc0a8cbe300ad@nanogene.org> <loom.20130527T215634-190@post.gmane.org>

next in thread | previous in thread | raw e-mail | index | archive | help
On Mon, 27 May 2013 20:01:29 +0000, Mogamat Abrahams wrote:
 > Mats A. Hansen <matsh@...> writes:
 > 
 > > Any reason you are running your webjail on the broadcast IP for the 
 > > subnet? IP range for your 0xfffffffc net would be (.77|.78).
 > 
 > Hi,
 > 
 > Thanks, however thats the info I got the from people providing the machine :

That's a worry .. you won't do any good trying to use the broadcast 
address.  Mats is right, you only get 2 usable addresses with a /30.

 > The hosts rc.conf:
 > 
 > ipv4_addrs_em0="67.x.x.x/27 174.x.x.76-79/30"
 > 
 > Will try some of the other ips and see how it goes.

If/when you're running a firewall, it's common to just drop any packets 
addressed to the network address (here .76) and broadcast address (.79) 
coming in from the outside.

Perhaps you need a /29, which would give you 6 usable addresses?

cheers, Ian



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20130528145629.X55451>