https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=278232
--- Comment #4 from Dirk Meyer <din...@freebsd.org> ---
Same failure on FreeBSD-13.3
# freebsd-version -kru
13.3-RELEASE-p1
13.3-RELEASE-p1
13.3-RELEASE-p1
I would like to know what the expected behavior of ip4.saddrsel in this case
is.
1)
The selection behaves different from the host,
changing the netmask to /24 did had no effect either.
# man jail
ip4.addr
A list of IPv4 addresses assigned to the jail. If this is set,
the jail is restricted to using only these addresses. Any
attempts to use other addresses fail, and attempts to use
wildcard addresses silently use the jailed address instead. For
IPv4 the first address given will be used as the source address
when source address selection on unbound sockets cannot find a
better match. It is only possible to start multiple jails with
the same IP address if none of the jails has more than this
single overlapping IP address assigned to itself.
ip4.saddrsel
A boolean option to change the formerly mentioned behaviour and
disable IPv4 source address selection for the jail in favour of
the primary IPv4 address of the jail. Source address selection
is enabled by default for all jails and the ip4.nosaddrsel
setting of a parent jail is not inherited for any child jails.
2)
There is also a sysctl, but I am unable to change it outside,
nor does it reflect the status inside the jail:
host# sysctl -d security.jail.param.ip4.saddrsel
security.jail.param.ip4.saddrsel: Do (not) use IPv4 source address selection
rather than the primary jail IPv4 address.
host# sysctl security.jail.param.ip4.saddrsel=1
security.jail.param.ip4.saddrsel: 0 -> 0
jail# sysctl security.jail.param.ip4.saddrsel
security.jail.param.ip4.saddrsel: 0
Is this the expected behavior ?
--
You are receiving this mail because:
You are the assignee for the bug.
