Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 12 Feb 2010 18:45:57 +0100
From:      Albert Shih <Albert.Shih@obspm.fr>
To:        Mykola Dzham <i@levsha.me>
Cc:        freebsd-jail@FreeBSD.org
Subject:   Re: setfib with jail
Message-ID:  <20100212174557.GA17643@obspm.fr>
In-Reply-To: <20100205173554.GA3631@laptop.levsha.me>
References:  <20100205153918.GH31809@obspm.fr> <20100205173554.GA3631@laptop.levsha.me>

next in thread | previous in thread | raw e-mail | index | archive | help
 Le 05/02/2010 à 19:35:54+0200, Mykola Dzham a écrit
>  Albert Shih wrote:
> > Hi all.
> > 
> > I'm trying to make setfib working with jail. I'm not sure to do correctly,
> > but I'm sure it's not working.
> > 
> > So this is what I do : 
> > 
> > 	- Rebuild kernel with 
> > 
> > 		option          ROUTETABLES=4
> > 
> > 	- Re-install the kernel, reboot
> > 
> > 	- Stop the jail
> > 
> > 	- flush all route (not default) on 0 fib
> > 
> > 	- create route in 1 fib
> > 
> > 		setfib 1 route add default xxx.yyy.zzz.ttt
> > 
> > 	- add 
> > 
> > 		jail_name_fib="1"
> > 
> > 	in my rc.conf
> > 
> > 	- start the jail with
> > 
> > 		/etc/rc.d/jail start name
> > 
> > 
> > ---> and it's not working because when I do 
> > 
> > 	jexec Jail_ID bash
> > 	netstat -rn
> > 
> > I see the 0 fib.
> > 
> > What's wrong ? 
> 
> Try to start ssh in jail, ssh into jail and run netstat -rn
> fib binds to process and childs, not to jail - jexec and childs started
> with your current fib, not with jail fib.

Thanks for the tips. But it's not working. I try every combinaison my poor
mind can invente and no one work. 

I'm running FreeBSD 7.2 -Release, I've «jail_name_fib» option in the
/etc/defaults/rc.conf. But do I need 7.3 or 8.0 to make it work ? 

Anyone have succefuly use setfib with jail  ? 

Regards.

JAS
-- 
Albert SHIH
SIO batiment 15
Observatoire de Paris Meudon
5 Place Jules Janssen
92195 Meudon Cedex
Téléphone : 01 45 07 76 26/06 86 69 95 71
Heure local/Local time:
Ven 12 fév 2010 18:44:18 CET



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20100212174557.GA17643>