Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 21 Feb 2013 13:26:42 +1030
From:      Shane Ambler <FreeBSD@ShaneWare.Biz>
To:        doug@safeport.com
Cc:        freebsd-questions@freebsd.org, Bernt Hansson <bah@bananmonarki.se>
Subject:   Re: jail and networking
Message-ID:  <51258CEA.1050006@ShaneWare.Biz>
In-Reply-To: <alpine.BSF.2.00.1302201830160.74170@oceanpt.safeport.com>
References:  <5124F505.4040906@bananmonarki.se> <13CA24D6AB415D428143D44749F57D7201EABA71@ltcfiswmsgmb21> <51250B20.4000308@bananmonarki.se> <512510ED.6080807@mail.com>, <51251496.4050701@bananmonarki.se> <13CA24D6AB415D428143D44749F57D7201EABC1F@ltcfiswmsgmb21> <51251FA5.6030903@mail.com> <alpine.BSF.2.00.1302201613280.27836@fledge.watson.org> <512554C6.3070306@bananmonarki.se> <alpine.BSF.2.00.1302201830160.74170@oceanpt.safeport.com>

next in thread | previous in thread | raw e-mail | index | archive | help
It's been a while since I experimented with jails but I'm pretty sure it 
is the reason I changed my sshd_config

When you start sshd on the base system by default it binds against 
0.0.0.0 and :: which is every ip4 and ip6 address configured on the base 
system, which includes the aliased ip's for your jails. This is 
represented by the *:22 from sockstat. When you start the jail it can't 
start sshd because the base already has that address/port in use.

In /etc/ssh/sshd_config comment out the ListenAddress 0.0.0.0 and 
ListenAddress :: then add ListenAddress 10.0.0.3

service sshd restart

start your jail and try again

The jail config is fine as the jail only sees the one ip address 
assigned to it.




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?51258CEA.1050006>