From owner-freebsd-jail@FreeBSD.ORG Thu Oct 2 14:44:35 2014 Return-Path: Delivered-To: freebsd-jail@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id B18C4AD0; Thu, 2 Oct 2014 14:44:35 +0000 (UTC) Received: from alogt.com (alogt.com [69.36.191.58]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 8B4BCCC8; Thu, 2 Oct 2014 14:44:35 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=alogt.com; s=default; h=Content-Transfer-Encoding:Content-Type:MIME-Version:References:In-Reply-To:Message-ID:Subject:Cc:To:From:Date; bh=yr3pl8PkRr//6bIbVgmzOUg0Ywkjl/u0UDxm1g3pOvI=; b=azv1V/UP2eaiwQp/2CiaMKFmSipdtGXx9gf9kAWaMiK5hAgRY88QW/oNd1binjWNIXKcHZv4hEpC5IbKl0F2fe9sJiHaUd8jYSVAA9yCNXre5rVKIXkvG15L7Omvx4J1Wy5+/fXYOKWQBtdFwUcJCKF5AiqAoH+bR3NzCaRZr7s=; Received: from [182.8.252.102] (port=65071 helo=X220.alogt.com) by sl-508-2.slc.westdc.net with esmtpsa (SSLv3:AES128-SHA:128) (Exim 4.82) (envelope-from ) id 1XZhcQ-003tFR-9O; Thu, 02 Oct 2014 08:44:35 -0600 Date: Thu, 2 Oct 2014 22:44:30 +0800 From: Erich Dollansky To: Warren Block Subject: Re: no network connection from inside a jail Message-ID: <20141002224430.7a4cb3f3@X220.alogt.com> In-Reply-To: References: <20141002180506.4965760b@X220.alogt.com> MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit X-AntiAbuse: This header was added to track abuse, please include it with any abuse report X-AntiAbuse: Primary Hostname - sl-508-2.slc.westdc.net X-AntiAbuse: Original Domain - freebsd.org X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12] X-AntiAbuse: Sender Address Domain - alogt.com X-Get-Message-Sender-Via: sl-508-2.slc.westdc.net: authenticated_id: erichsfreebsdlist@alogt.com X-Source: X-Source-Args: X-Source-Dir: Cc: freebsd-jail@freebsd.org, freebsd-stable@freebsd.org X-BeenThere: freebsd-jail@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: "Discussion about FreeBSD jail\(8\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 02 Oct 2014 14:44:35 -0000 Hi, On Thu, 2 Oct 2014 08:10:16 -0600 (MDT) Warren Block wrote: > On Thu, 2 Oct 2014, Erich Dollansky wrote: > > > Hi, > > > > I recently upgraded to 10.1 BETA3 via sources. All seemed to be fine > > until I started jails which connect to the Internet. It simply does > > not work anymore. When the browser from the jail connects to > > another jail on the same machine via HTTP, it all works. Accesses > > to the ouside of the machine fails. > > > > Even a ping to a local device does not work. > > > > ping 192.168.yyy.xxx > > ping: socket: Operation not permitted > > > > despite having > > > > security.jail.allow_raw_sockets: 1 > > > > Just to make sure, I upgraded also the world in all jails without > > any difference. > > > > UPDATING did not mention any changes since BETA1. > > > > I feel a bit lost now. > > > > What could have caused the problems? > > Does the jail have more than one Ethernet interface? not really. Lagg is used to switch between wireless and wire: em0: flags=8843 metric 0 mtu 1500 options=4219b ether f0:de:f1:cd:10:3a media: Ethernet autoselect status: no carrier iwn0: flags=8843 metric 0 mtu 2290 ether f0:de:f1:cd:10:3a media: IEEE 802.11 Wireless Ethernet autoselect mode 11ng status: associated lo0: flags=8049 metric 0 mtu 16384 options=600003 lagg0: flags=8843 metric 0 mtu 1500 ether f0:de:f1:cd:10:3a inet 192.168.0.18 netmask 0xffffffff broadcast 192.168.0.18 media: Ethernet autoselect status: active laggproto failover lagghash l2,l3,l4 laggport: wlan0 flags=4 laggport: em0 flags=1 wlan0: flags=8843 metric 0 mtu 1500 ether f0:de:f1:cd:10:3a media: IEEE 802.11 Wireless Ethernet MCS mode 11ng status: associated ssid xxxxxx channel 1 (2412 MHz 11g ht/40+) bssid 90:61:0c:13:36:fe country US authmode WPA2/802.11i privacy ON deftxkey UNDEF AES-CCM 2:128-bit txpower 14 bmiss 10 scanvalid 60 bgscan bgscanintvl 300 bgscanidle 250 roam:rssi 7 roam:rate 64 protmode CTS ampdulimit 32k ampdudensity 16 -amsdutx amsdurx shortgi wme roaming MANUAL The address 192.168.0.18 is also not reachable from outside. Erich