From owner-freebsd-questions@FreeBSD.ORG Sun Sep 24 21:38:37 2006 Return-Path: X-Original-To: freebsd-questions@freebsd.org Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 22F4116A40F for ; Sun, 24 Sep 2006 21:38:37 +0000 (UTC) (envelope-from mse_software@charter.net) Received: from mxsf31.cluster1.charter.net (mxsf31.cluster1.charter.net [209.225.28.130]) by mx1.FreeBSD.org (Postfix) with ESMTP id 3DA1B43D6A for ; Sun, 24 Sep 2006 21:38:35 +0000 (GMT) (envelope-from mse_software@charter.net) Received: from mxip36a.cluster1.charter.net (mxip36a.cluster1.charter.net [209.225.28.251]) by mxsf31.cluster1.charter.net (8.12.11.20060308/8.12.11) with ESMTP id k8OLcYL9024321 for ; Sun, 24 Sep 2006 17:38:34 -0400 Received: from 71-92-102-230.dhcp.knwk.wa.charter.com (HELO yak.mseubanks.net) ([71.92.102.230]) by mxip36a.cluster1.charter.net with ESMTP; 24 Sep 2006 17:38:33 -0400 From: Michael Eubanks To: freebsd-questions@freebsd.org In-Reply-To: References: Content-Type: text/plain Date: Sun, 24 Sep 2006 14:38:31 -0700 Message-Id: <1159133911.746.23.camel@yak.mseubanks.net> Mime-Version: 1.0 X-Mailer: Evolution 2.6.3 FreeBSD GNOME Team Port Content-Transfer-Encoding: 7bit Subject: Re: Patches for jail support of multiple IPs? X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: mse_software@charter.net List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 24 Sep 2006 21:38:37 -0000 On Sat, 2006-09-23 at 12:51 -0700, Chris wrote: > Are there any official patches to support multiple IPs in jails or > would I be limited to taking a chance with the few 6.1 patch files > I've found on the net. I searched the UPDATING on HEAD and for > anything that might be related but found nothing. Everything I could > google on the subject led me to sources that didn't appear to be > related to the project. I'm suspicious of using patches being > developed outside of the freebsd community yet I'd really hoped to > move to a completely jailed OS for our servers. Is it just too soon > to be looking for this capability in a production capacity? I suppose you could alias your primary network interface, then use a simple firewall with multiple divert sockets for address translation, thereby forwarding packets to a single jail IP (possible with multiple jail ports open). -Michael S. Eubanks mse_software@charter.net