[patch] Raw sockets in jails
Poul-Henning Kamp
phk at phk.freebsd.dk
Tue Apr 20 13:24:45 PDT 2004
In message <20040420200027.A51891 at staff.seccuris.com>, "Christian S.J. Peron" w
rites:
>Poul/group
>
>The following patch makes raw sockets comply with prison IP addresses.
>Some tools such as traceroute(8) may require that the prison IP address
>be specified on the command line. I.E.
>
> traceroute -s <prison ip> <dest address>
>
>Otherwise it might fail.
How does traceroute and ping normally determine which source address
to use ? Can't we use that mechanism to default them to the right thing ?
--
Poul-Henning Kamp | UNIX since Zilog Zeus 3.20
phk at FreeBSD.ORG | TCP/IP since RFC 956
FreeBSD committer | BSD since 4.3-tahoe
Never attribute to malice what can adequately be explained by incompetence.
More information about the freebsd-hackers
mailing list