[patch] Raw sockets in jails

Poul-Henning Kamp phk at phk.freebsd.dk
Tue Apr 20 13:24:45 PDT 2004


In message <20040420200027.A51891 at staff.seccuris.com>, "Christian S.J. Peron" w
rites:
>Poul/group
>
>The following patch makes raw sockets comply with prison IP addresses.
>Some tools such as traceroute(8) may require that the prison IP address
>be specified on the command line. I.E.
>
>	traceroute -s <prison ip> <dest address>
>
>Otherwise it might fail.

How does traceroute and ping normally determine which source address 
to use ?   Can't we use that mechanism to default them to the right thing ?

-- 
Poul-Henning Kamp       | UNIX since Zilog Zeus 3.20
phk at FreeBSD.ORG         | TCP/IP since RFC 956
FreeBSD committer       | BSD since 4.3-tahoe    
Never attribute to malice what can adequately be explained by incompetence.


More information about the freebsd-hackers mailing list