From owner-freebsd-questions@FreeBSD.ORG Thu Dec 7 15:22:44 2006 Return-Path: X-Original-To: freebsd-questions@freebsd.org Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id 52C3616A50B for ; Thu, 7 Dec 2006 15:22:44 +0000 (UTC) (envelope-from nalists@scls.lib.wi.us) Received: from mail.scls.lib.wi.us (mail.scls.lib.wi.us [198.150.40.25]) by mx1.FreeBSD.org (Postfix) with ESMTP id 7EADF43F70 for ; Thu, 7 Dec 2006 15:17:56 +0000 (GMT) (envelope-from nalists@scls.lib.wi.us) Received: from [10.1.99.103] ([10.1.99.103]) by mail.scls.lib.wi.us (8.13.1/8.13.1) with ESMTP id kB7FIMC4033972; Thu, 7 Dec 2006 09:18:23 -0600 (CST) (envelope-from nalists@scls.lib.wi.us) Message-ID: <457830BE.60203@scls.lib.wi.us> Date: Thu, 07 Dec 2006 09:18:22 -0600 From: Greg Barniskis User-Agent: Thunderbird 1.5.0.8 (Windows/20061025) MIME-Version: 1.0 To: Denzil Kelly References: In-Reply-To: Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Cc: freebsd-questions@freebsd.org Subject: Re: freebsd jails X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 07 Dec 2006 15:22:44 -0000 Denzil Kelly wrote: > I need to implement web content filtering using squidguard and/or > dansguardian for several locations. Each site has different filtering > requirements. I want to know if it is possible to do this using a jail for > each site(provided that I have sufficiently powerful hardware). Should not be too difficult to implement. > I want to > have a different IP address for each jail. A unique IP for each jail is required in any case. > If this is possible do I need to > have a different NIC for each jail? Nope. Just use aliases in rc.conf for the one NIC. For example, if I have a NIC fxp0, on a host with two jails: ifconfig_fxp0="inet 192.168.0.1 netmask 255.255.255.0" ifconfig_fxp0_alias0="inet 192.168.0.2 netmask 255.255.255.255" ifconfig_fxp0_alias1="inet 192.168.0.3 netmask 255.255.255.255" Note the alias masks are all ones -- that's not a typo. -- Greg Barniskis, Computer Systems Integrator South Central Library System (SCLS) Library Interchange Network (LINK) , (608) 266-6348