From owner-freebsd-stable@FreeBSD.ORG Fri Oct 3 07:40:20 2014 Return-Path: Delivered-To: freebsd-stable@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id BEBE22A4 for ; Fri, 3 Oct 2014 07:40:20 +0000 (UTC) Received: from mail-wg0-x233.google.com (mail-wg0-x233.google.com [IPv6:2a00:1450:400c:c00::233]) (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4FAC033B for ; Fri, 3 Oct 2014 07:40:20 +0000 (UTC) Received: by mail-wg0-f51.google.com with SMTP id b13so768942wgh.22 for ; Fri, 03 Oct 2014 00:40:18 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=message-id:date:from:user-agent:mime-version:to:cc:subject :references:in-reply-to:content-type:content-transfer-encoding; bh=cOfsBTB5OZs1MJJUaxBv8+leDjDUXQqUBm/RBMbXohg=; b=hybnXzxUv+GZm3IXoEoOHi3kqtG5q4WX9mIWVC41VLGtYWGkEkVXHmsq46OcHZgl0Z glFPiccxaj/22i7E13XddSmYhLmlMzSRuWcPOoq93VvYFScISeR7h56WbWz4It4bzkxh 4GpHzglVnhl4WxcwdTCY8jOB+D0ImL3UMegY7yXCNbXRdu5gN6QiHPz/zua80bCpHaZz 3QjCXYg3mt5BVSjmxneO+qzYIV7SU0zhSCLFRirVrexE0lUmtnm0AiqqKelsaPE8Pvgi tWFtxTKYHqa/zwCZSgZv52EkPhnIKc0OE3Ifqxhwneev4QFW/+M74v4PoGWoEqYbabOJ q8tQ== X-Received: by 10.194.93.193 with SMTP id cw1mr5171920wjb.50.1412322018423; Fri, 03 Oct 2014 00:40:18 -0700 (PDT) Received: from [192.168.1.145] ([193.173.55.180]) by mx.google.com with ESMTPSA id wk5sm7078958wjb.12.2014.10.03.00.40.17 for (version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Fri, 03 Oct 2014 00:40:17 -0700 (PDT) Message-ID: <542E52E1.7060106@gmail.com> Date: Fri, 03 Oct 2014 09:40:17 +0200 From: Johan Hendriks User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:31.0) Gecko/20100101 Thunderbird/31.1.2 MIME-Version: 1.0 To: Erich Dollansky Subject: Re: no network connection from inside a jail References: <20141002180506.4965760b@X220.alogt.com> <542D4A1B.4060405@gritton.org> <20141002222553.42bf17e3@X220.alogt.com> In-Reply-To: <20141002222553.42bf17e3@X220.alogt.com> Content-Type: text/plain; charset=windows-1252; format=flowed Content-Transfer-Encoding: 7bit Cc: freebsd-stable@freebsd.org X-BeenThere: freebsd-stable@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: Production branch of FreeBSD source code List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 03 Oct 2014 07:40:20 -0000 Op 02-10-14 om 16:25 schreef Erich Dollansky: > Hi, > > On Thu, 02 Oct 2014 06:50:35 -0600 > James Gritton wrote: > >> On 10/2/2014 4:05 AM, Erich Dollansky wrote: >>> Hi, >>> >>> I recently upgraded to 10.1 BETA3 via sources. All seemed to be fine >>> until I started jails which connect to the Internet. It simply does >>> not work anymore. When the browser from the jail connects to >>> another jail on the same machine via HTTP, it all works. Accesses >>> to the ouside of the machine fails. >>> >>> Even a ping to a local device does not work. >>> >>> ping 192.168.yyy.xxx >>> ping: socket: Operation not permitted >>> >>> despite having >>> >>> security.jail.allow_raw_sockets: 1 >>> >>> Just to make sure, I upgraded also the world in all jails without >>> any difference. >>> >>> UPDATING did not mention any changes since BETA1. >>> >>> I feel a bit lost now. >>> >>> What could have caused the problems? >>> >>> Erich >> It would be handle to see what happens when the IP addresses are set >> on the jail in the first place. Try running: >> >> jail -r '*' >> jail -v -c '*' >> >> and look at the results when it (presumably) runs ifconfig. >> Hopefully, there'll be a clue there. > this looks pretty normal to me: > > ClawsMailTest: run command: /sbin/ifconfig lagg0 inet 192.168.0.17 > netmask 255.255.255.255 -alias > MemDisk: run command: /sbin/ifconfig > lagg0 inet 192.168.0.16 netmask 255.255.255.255 alias > Projekte: run command: /sbin/ifconfig lagg0 inet 192.168.0.11 netmask > 255.255.255.255 alias > Ports: run command: /sbin/ifconfig lagg0 inet 192.168.0.12 netmask > 255.255.255.255 alias > TestInternet: run command: /sbin/ifconfig lagg0 > inet 192.168.0.19 netmask 255.255.255.255 alias TestInternet: run > command: /sbin/mount -t devfs > -oruleset=4 . /usr/home/jails/TestInternet/dev > > This is just an extract. > > I am now able to use ping. It only allows me to ping other jails on the > same machine. Even a ping to any device at the LAN does not work. > > I get now this: > > ln: /dev/log: Operation not permitted If you want to get rid of this message you can use the patch mentioned in the following URL. https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=179828 > > which I did not notice before the upgrade. > > What I did not mention before. I am able to connect to the jails via > telnet from the machine's rooot but not from any other machine. > > Of course, the setup worked before without any problems. > > Erich > _______________________________________________ > freebsd-stable@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-stable > To unsubscribe, send any mail to "freebsd-stable-unsubscribe@freebsd.org"