On Thu, 09 Jan 2003 16:33:03 +0100
"Wiroth Didier" <[EMAIL PROTECTED]> wrote:
[...]
> In the jails rc.conf I have added the following line:
> syslogd_flags="-ss -l /etc/namedb/dev/log"

http://docs.freebsd.org/44doc/papers/jail/jail-7.html

[...]
In most of the production environments where jail is currently in use,
one IP address is allocated to the host environment, and then a number
are allocated to jail boxes, with each jail box receiving a unique IP.
In this situation, it is sufficient to configure the networking
applications on the host to listen only on the host IP. Generally, this
consists of specifying the appropriate IP address to be used by inetd
and SSH, and disabling applications that are not capable of limiting
their address scope, such as sendmail, the port mapper, and syslogd.
Other third party applications that have been installed on the host must
also be configured in this manner, or users connecting to the jailbox
will discover the host environment service, unless the jailbox has
specifically bound a service to that port. In some situations, this can
actually be the desirable behaviour.[...]

> How can I prevent the other error messages! like the bind
> to port error of the sshd?

Well, the ssh on your Hostsystem binds on port 22. Also the sshd on your
jail wants to bind on Port 22. Well, ok, different IP numbers, but i
think sshd binds port 22 to all known IP addresses on the system. So,
when you hostsyste is up, it binds the host sshd also the the jail IP.
The result...

Just use another port for one the the sshd. 
Just put in the rc.conf:
sshd_flags="-p <portnumber>"
 

--
asg

To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-questions" in the body of the message

Reply via email to