Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 17 Nov 2009 10:40:54 +0000 (UTC)
From:      "Bjoern A. Zeeb" <bzeeb-lists@lists.zabbadoz.net>
To:        "Scheithauer, Lars (FH)" <Lars.Scheithauer@fh-heidelberg.de>
Cc:        freebsd-jail@freebsd.org
Subject:   Re: Networking from jail - errata
Message-ID:  <20091117103601.G37440@maildrop.int.zabbadoz.net>
In-Reply-To: <26040005B7F3AA41A0345BCE386CA09701C62A7A@FHCLUSRV-EX.dcs.fh-heidelberg.de>
References:  <26040005B7F3AA41A0345BCE386CA09701C62A79@FHCLUSRV-EX.dcs.fh-heidelberg.de> <26040005B7F3AA41A0345BCE386CA09701C62A7A@FHCLUSRV-EX.dcs.fh-heidelberg.de>

next in thread | previous in thread | raw e-mail | index | archive | help
  This message is in MIME format.  The first part should be readable text,
  while the remaining parts are likely unreadable without MIME-aware tools.

--0-1639566562-1258454454=:37440
Content-Type: TEXT/PLAIN; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: QUOTED-PRINTABLE

On Tue, 17 Nov 2009, Scheithauer, Lars (FH) wrote:

Hi,

> Quick note:
> Forgot to replace two values.
> Jail - x.y.z.61
> Host - x.y.z.60
> Router - x.y.z.62
>
>
> -----Urspr=FCngliche Nachricht-----
> Von: owner-freebsd-jail@freebsd.org [mailto:owner-freebsd-jail@freebsd.or=
g] Im Auftrag von Scheithauer, Lars (FH)
> Gesendet: Dienstag, 17. November 2009 10:19
> An: freebsd-jail@freebsd.org
> Betreff: Networking from jail
>
> Hi everyone!
>
> I'm having a little trouble with my jail's networking and I'm not sure
> what to make of it.
>
> My jailhost has an IP of x.y.z.48, my test jail is x.y.z.49. The
> jailhost has both IP-adresses, the jail has just it's own:
>
> Jail# ifconfig
> bce0: flags=3D8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu
> 1500
>
> options=3D1bb<RXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING,JUMBO_MTU,VLAN_HWCSUM=
,
> TSO4>
>        ether xx:xx:xx:xx:xx:10
>        inet x.y.z.60 netmask 0xffffffc0 broadcast x.y.z.63
>        media: Ethernet autoselect (1000baseSX <full-duplex>)
>        status: active
> [...]
> Host# ifconfig
> bce0: flags=3D8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu
> 1500
>
> options=3D1bb<RXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING,JUMBO_MTU,VLAN_HWCSUM=
,
> TSO4>
>        ether xx:xx:xx:xx:xx:10
>        inet x.y.z.61 netmask 0xffffffc0 broadcast x.y.z.63
>        inet x.y.z.60 netmask 0xffffffc0 broadcast x.y.z.63
>        media: Ethernet autoselect (1000baseSX <full-duplex>)
>        status: active
> [...]
>
> I am able to access the ssh-server running on the jail, and I am able to
> access the proxyserver of our network via telnet and get some pages of
> the internet. However, if I want to install something from the ports,
> the jail is unable to fetch it:
>
> Jail# cd /usr/ports/ftp/wget
> Jail# make
> =3D=3D=3D>  Vulnerability check disabled, database not found
> =3D=3D=3D>  Found saved configuration for wget-1.11.4_1
> =3D> wget-1.11.4.tar.bz2 doesn't seem to exist in /usr/ports/distfiles/.
> =3D> Attempting to fetch from http://ftp.gnu.org/gnu/wget/.
> fetch: http://ftp.gnu.org/gnu/wget/wget-1.11.4.tar.bz2: Operation timed
> out
> =3D> Attempting to fetch from ftp://ftp.gnu.org/gnu/wget/.
> [...]
>
> I've set the appropriate environment variables HTTP_PROXY, HTTPS_PROXY
> and FTP_PROXY. If I test the connection with netcat, I get the following
> error message:
> # nc -zvw 1 -x 'proxy.example.com:8080' www.freebsd.org 80
> nc: read failed (0/3): Broken pipe

The usual thing I am interested at that point is - does name
resolution work properly from within the jail?  /etc/resolv.conf setup
correctly etc?



> The funny thing is, that I have no problem installing ports from the
> Host-system. From what I can tell, all the config files are correct:
>
> Jail# cat /etc/rc.conf
> sshd_enable=3D"YES"
> ifconfig_bce0=3D"inet x.y.z.60 netmask 255.255.255.192"
> defaultrouter=3D"x.y.z.62"
> hostname=3D"jail.example.com"

That's not going to work, really (the ifconfig, defaultrouter, and
unless you changed the defaults on the host system not even the
hostname).  You should actually remove those.


> Host# cat /etc/rc.conf
> sshd_enable=3D"NO"
> ifconfig_bce0=3D"inet x.y.z.61 netmask 255.255.255.192"
> defaultrouter=3D"x.y.z.62"
> hostname=3D"host.example.com"
> ipv6_enable=3D"NO"
> jail_enable=3D"YES"
> jail_set_hostname_allow=3D"NO"
> jail_list=3D"jail"
> jail_jail_hostname=3D"jail"
> jail_jail_ip=3D"x.y.z.60"
> jail_jail_rootdir=3D"my/jail/root"
> jail_jail_devfs_enable=3D"YES"

That doesn't really match your ifconfig output from above; something
on the host system would have to set the IP address of the host. I
would expect something like (you may have mixed jail and host
addresses so properly sort this):

# host system IP address
ifconfig_bce0=3Dinet x.y.z.61 netmask 255.255.255.192"
# jail IP address
ifconfig_bce0_alias0=3Dinet x.y.z.60 netmask 255.255.255.255"

Note that the alias has a /32 netmask.


/bz

--=20
Bjoern A. Zeeb         It will not break if you know what you are doing.
--0-1639566562-1258454454=:37440--



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20091117103601.G37440>