Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 10 Aug 2010 19:59:39 -0700
From:      merlyn@stonehenge.com (Randal L. Schwartz)
To:        Fbsd8 <fbsd8@a1poweruser.com>
Cc:        freebsd-questions@freebsd.org
Subject:   Re: How to connect a jail to the web ?
Message-ID:  <868w4dzwf8.fsf@red.stonehenge.com>
In-Reply-To: <4C620FF5.1020900@a1poweruser.com> (fbsd8@a1poweruser.com's message of "Wed, 11 Aug 2010 10:50:29 %2B0800")
References:  <268321.67123.qm@web24608.mail.ird.yahoo.com> <4C61E8B1.7050605@a1poweruser.com> <86mxsuynm0.fsf@red.stonehenge.com> <4C620356.6070402@a1poweruser.com> <86fwylzyqd.fsf@red.stonehenge.com> <4C620FF5.1020900@a1poweruser.com>

next in thread | previous in thread | raw e-mail | index | archive | help
>>>>> "Fbsd8" == Fbsd8  <fbsd8@a1poweruser.com> writes:

Fbsd8> No. Your jail is assigned it's ip address when you create it. The
Fbsd8> alias gives the jail network access when you start the jail. Both
Fbsd8> ip address must match.

Yup, and if that's a 10.x address, I'm not on the net.  So I have to
route to it somehow.

Fbsd8> Just assign the jail your public ip address when you create it.

I was under the impression that the address had to be distinct, in order
to uniquely identify it.  Are you saying that's not the case?  If so,
the docs on jails are unclear.

Fbsd8> "face the public" is a very large subject, which the answer depends on your
Fbsd8> hardware configuration, registered domain names and static ip
Fbsd8> addresses.

Yes, I'm hoping not to burn a second or third public address for my
jail.  Instead, I just want my jail to have a punch through (port 80,
port 25, etc) from my one public address.  Is there a trick to this
without burning another public address?  Or do I misunderstand (based on
poor docs) how a jail attaches itself to an interface?

Fbsd8> Using jails requires the host system administrator to be well
Fbsd8> trained in networks and how public and private networks
Fbsd8> function. Jail documentation is not going to teach you this.

Now you're just being condescending.  It's fairly likely, almost
certain, that I've been dealing with IP traffic since before you could
type.

What I'm asking for is the specifics of Jails.  I *know* how IP traffic
works, and even what alias does.  What I don't know is FreeBSD's
particulars that make this either hard or easy.  I *do* know about pf,
having administered an OpenBSD box for a number of years.  I'm just new
to jails, and since you're the "expert", you might have a little
patience on that realm, please.

-- 
Randal L. Schwartz - Stonehenge Consulting Services, Inc. - +1 503 777 0095
<merlyn@stonehenge.com> <URL:http://www.stonehenge.com/merlyn/>;
Smalltalk/Perl/Unix consulting, Technical writing, Comedy, etc. etc.
See http://methodsandmessages.vox.com/ for Smalltalk and Seaside discussion



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?868w4dzwf8.fsf>