Re: Jail source address selection broken, patch for ping

2012-04-10 Thread Anders Hagman
11 apr 2012 kl. 00:14 skrev Mark Felder : > On Tue, 10 Apr 2012 04:03:22 -0500, Anders Hagman > wrote: > >> I have used vnet jail to get your own IP stack. >> One strange thing is that tcpdump on the host can not see the packets. > > > Yes, vnet avoids this issue. You shouldn't be able to tc

Re: Jail source address selection broken, patch for ping

2012-04-10 Thread Mark Felder
On Tue, 10 Apr 2012 04:03:22 -0500, Anders Hagman wrote: I have used vnet jail to get your own IP stack. One strange thing is that tcpdump on the host can not see the packets. Yes, vnet avoids this issue. You shouldn't be able to tcpdump on the host to see the packets; those interfaces a

Re: Jail source address selection broken, patch for ping

2012-04-10 Thread Anders Hagman
Hi I have done a test. My setup inside the jail: vlan102: flags=8843 metric 0 mtu 1500 ether 00:19:db:d5:db:c5 inet 10.3.0.2 netmask 0xff00 broadcast 10.3.0.255 inet6 fe80::219:dbff:fed5:dbc5%vlan102 prefixlen 64 scopeid 0x3 nd6 options=21 media: Ethe