Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 01 Jun 2014 03:14:17 +0300
From:      s7r <s7r@sky-ip.org>
To:        freebsd-jail@freebsd.org
Subject:   cannot access internet from jail, help needed please
Message-ID:  <538A7059.7070500@sky-ip.org>

next in thread | raw e-mail | index | archive | help
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi,

I am trying to build a jail on FreeBSD 10.0 amd64 and it cannot access
the internet. Here are the steps I followed:

1. install ezjail from ports and enable it in rc.conf

2. My server has 3 public IPv4 addresses. Add one of them as an alias
(for the jail):
# ifconfig em0 alias <ip> netmask 255.255.255.255
# echo 'ifconfig_em0_alias0="inet <ip> netmask 255.255.255.255"' >>
/etc/rc.conf

3. enable ip forwarding
# sysctl net.inet.ip.forwarding=1

4. create the jail with the dedicated IP added as an alias

5. provide a name resolver in jail's /etc/resolv.conf

6. start the jail
# service ezjail start

7. console into the jail
# ezjail-admin console <jailname>

8. cannot access the internet. cannot use ports, cannot do anything.

The public IP address assigned to the jail is PINGable from the
outside (another server) and also PINGable from the host.

What is wrong here? I have searched the forums and everywhere on the
internet and saw no mistake or no steps missed.

- -- 
s7r
PGP Fingerprint: 7C36 9232 5ABD FB0B 3021 03F1 837F A52C 8126 5B11
PGP Pubkey: http://www.sky-ip.org/s7r@sky-ip.org.asc
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.22 (MingW32)

iQEcBAEBAgAGBQJTinBZAAoJEIN/pSyBJlsRh/UIAJL0CHmlZ7xh2nAn/cbAWv67
zjIYpaubYOOAVfTm6d8LRL+8dtqpag+jE3VOB4oz9mfG3HRHyYxHFB7+bwTJajuS
DXg8GnuG49OHO/FNBAEew0PzfVmjuNsMkztZcJJqWHxrHnQcwZYWth5eZj8WSSJ0
MgQi4lLbYwZerFmezozO4wgBRS7Ing1raOgwtHZOXTuiHIglf9t1LGgbkzu3AuPO
BDeYJQn159un6tkI5luoT6DTX+2wF+at2f//31KEoFNNT70lBKV3G/jKk+k0/s92
5ZS6jalTCDQ+jrpJmjTYrrkU+jQbMOcjoe9UlPpgo26kQftp2Z/Cu/3mW0qIUYA=
=2BuA
-----END PGP SIGNATURE-----



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?538A7059.7070500>