Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 22 Mar 2010 20:40:58 +0800
From:      Aiza <aiza21@comclark.com>
To:        Ruben de Groot <mail25@bzerk.org>, jj@dhenin.fr,  Aiza <aiza21@comclark.com>, Mark Shroyer <subscriber+freebsd@markshroyer.com>,  freebsd-questions@freebsd.org
Subject:   Re: ezjail
Message-ID:  <4BA7655A.70604@comclark.com>
In-Reply-To: <20100322112235.GA78247@ei.bzerk.org>
References:  <4BA5AA53.5030503@comclark.com> <4BA69566.2040504@markshroyer.com>	<4BA6B80F.7050806@comclark.com> <4BA6CB8B.8070309@markshroyer.com>	<4BA73C9D.7090900@comclark.com>	<20100322095545.GA77714@ei.bzerk.org>	<12437d831003220323o4463044bu416f994f0129b459@mail.gmail.com> <20100322112235.GA78247@ei.bzerk.org>

next in thread | previous in thread | raw e-mail | index | archive | help
Ruben de Groot wrote:
> On Mon, Mar 22, 2010 at 11:23:54AM +0100, Dh?nin Jean-Jacques typed:
> 
>>>> on the lan gives me no sockets mesg. And ftp from 10.0.10.6 to
>>>> 10.0.20.30 the ftp jail gives me no connection error.
> 
>> add
>>
>> sysctl security.jail.allow_raw_sockets=1
>> or in /etc/sysctl.conf
>> on the host (not in in the jail)
> 
> This will enable him to ping another host from within the jail. I won't 
> do anything for ftp.
> 
> OP: what exact error do you get? And does ftp work *within* the jail
> (ftp localhost)?

with sysctl security.jail.allow_raw_sockets=1  done on the host. From 
within the jail did ping -c 2 10.0.10.6 which is a pc on the lan gives 
me socket: Operation not permitted mesg.

And ftp from 10.0.10.6 to 10.0.20.30 the ftp jail gives me no connection 
error.

Just how am i to determine if ftp work *within* the jail ftp localhost?



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?4BA7655A.70604>