Configuring JAIL to bind on lo0 interface
GiZmen
gizmen at blurp.one.pl
Fri Dec 19 17:42:42 PST 2003
> As i understood your problem you need addition alias on lo0 interface
> for gateway ip purpose. So you have lo0 interface and lo0_alias0
> 192.168.1.1 as default gateway for jails. And now you create new jails'
> ip as aliases on lo0 iface.
>
> For example:
>
> no jail, only gateway - lo0_alias0 192.168.1.1/24
>
> jail1 - lo0_alias1 192.168.1.2/24 - hostname jail1.domain.com
> in this jail set default gateway to 192.168.1.1
>
> jail2 - lo0_alias2 192.168.1.3/24 - hostname jail2.domain.com
> in this jail set default gateway to 192.168.1.1 also
>
> Your host machine have to be gateway enabled.
>
> Now if you want to switch on internet access from jail1 you only need to
> add nat rule to translate jail1's ip to the host primary ip.
>
> Alesha.
I dont know how can it work? AFAIK in jail i cant change the default
gateway.
--
Best Regards:
GiZmen
More information about the freebsd-security
mailing list