From owner-freebsd-questions Mon Nov 19 22:15:50 2001 Delivered-To: freebsd-questions@freebsd.org Received: from backup.dagupan.com (www.psysc.org.ph [206.101.69.5]) by hub.freebsd.org (Postfix) with ESMTP id C13B337B416 for ; Mon, 19 Nov 2001 22:15:42 -0800 (PST) Received: by apmail.dagupan.com with Internet Mail Service (5.5.2653.19) id ; Tue, 20 Nov 2001 14:15:46 +0800 Message-ID: <10F29E27A956D511B0940050DA8D86A9340BB1@apmail.dagupan.com> From: francisv@dagupan.com To: freebsd-questions@freebsd.org Subject: RE: Help with setting up jail Date: Tue, 20 Nov 2001 14:15:36 +0800 MIME-Version: 1.0 X-Mailer: Internet Mail Service (5.5.2653.19) Content-Type: text/plain; charset="iso-8859-1" Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG Thanks Crist! BTW, do you also know other references/pointers/tips related to jail (e.g. setting up of web services, ftp, mail, etc.)? -----Original Message----- From: Crist J. Clark [mailto:cristjc@earthlink.net] Sent: Tuesday, November 20, 2001 2:11 PM To: francisv@dagupan.com Cc: freebsd-questions@FreeBSD.ORG Subject: Re: Help with setting up jail On Tue, Nov 20, 2001 at 10:42:59AM +0800, francisv@dagupan.com wrote: > Hi, > > This is my first time to configure a jailed environment on FreeBSD > 4.4-STABLE. I have read the `man jail(8)' and successfully installed the > jail directory tree: > > D=/here/is/the/jail > cd /usr/src > make world DESTDIR=$D > cd etc > make distribution DESTDIR=$D NO_MAKEDEV=yes > cd $D/dev > sh MAKEDEV jail > cd $D > ln -sf dev/null kernel > > But once inside the jail environment, I could not ping nor contact the > outside world (even the parent environment). It displays an error: > > ping: socket: Operation not permitted > > How can I install other packages if I can't even ping the parent host? ping(8) send out the ICMP echo datagram on a raw socket. You can't open raw sockets in a jailed environment. You cannot ping(8). Opening TCP connections or sending UDP datagrams should work fine. Try traceroute(8) or telnet(1). -- Crist J. Clark | cjclark@alum.mit.edu | cjclark@jhu.edu http://people.freebsd.org/~cjc/ | cjc@freebsd.org To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message