Re: multiple interfaces for jail.conf(1) and jail_set(2)

2016-12-14 Thread Dave B via freebsd-jail
On 14/12/16 03:21, Ian Smith wrote: > On Wed, 14 Dec 2016 10:09:58 +0800, Ernie Luzar wrote: > > > I recommend you check out these ports, > > jail-primer gives background on jails across Freebsd releases. > > qjail a utility that simplifies jail admin. > > Joe Barbish, > > please stop using resp

Re: Closing ports in jail with ipfw

2016-12-14 Thread marcel
Le Mon, 05 Dec 2016 08:31:19 +0800, Ernie Luzar a écrit : > marcel wrote: > > Hi there, > > > > I've created a jail and when I do a nmap on his IP, I can see that > > port 25 and 22 are open but I don't want. So i've tried to create > > an IPFW rule by adding 'ipwf -q add 00290 deny all from rou

Re: multiple interfaces for jail.conf(1) and jail_set(2)

2016-12-14 Thread Valeri Galtsev
On Tue, December 13, 2016 10:47 pm, Isaac (.ike) Levy wrote: > Hi Valeri, > >> On Dec 13, 2016, at 5:03 PM, Valeri Galtsev >> wrote: >> >> On Tue, December 13, 2016 2:14 pm, Isaac (.ike) Levy wrote: >>> Hi All, >>> >>> Can I specify multiple IP interfaces and assign IP’s to them using >>> ja

Re: multiple interfaces for jail.conf(1) and jail_set(2)

2016-12-14 Thread Valeri Galtsev
On Tue, December 13, 2016 11:43 pm, Allan Jude wrote: > On 2016-12-13 23:47, Isaac (.ike) Levy wrote: >> Hi Valeri, >> >>> On Dec 13, 2016, at 5:03 PM, Valeri Galtsev >>> wrote: >>> >>> On Tue, December 13, 2016 2:14 pm, Isaac (.ike) Levy wrote: Hi All, Can I specify multiple IP in

Re: multiple interfaces for jail.conf(1) and jail_set(2)

2016-12-14 Thread Isaac (.ike) Levy
> On Dec 14, 2016, at 8:31 AM, Valeri Galtsev wrote: > >>> no, this is not possible. Jail can only have one IP address (in addition >>> to loopback addresses). >> >> Do you mean this just for jail.conf configuration/usage? > > No, that was earlier, in /etc/rc.conf. Since then I've heard that i

Re: multiple interfaces for jail.conf(1) and jail_set(2)

2016-12-14 Thread Isaac (.ike) Levy
Hi Alan, > On Dec 14, 2016, at 12:43 AM, Allan Jude wrote: > > In ezjail I can just do this: > > > export > jail_something_scaleengine_net_ip="vlan43|10.0.0.17,vlan43|2001:470:1::1:6667,lo0|127.0.3.1" > > If you include the interface name like that, it will automatically add > the alias when

Re: multiple interfaces for jail.conf(1) and jail_set(2)

2016-12-14 Thread Isaac (.ike) Levy
>> In ezjail I can just do this: >> > > Of course, it is great to learn that some tools can do this or that. > However, this only is helpful to those who are just choosing what to use > for the future. Once your choice is made, you (at least I) kind of avoid > jumping over to doing something usi

Re: multiple interfaces for jail.conf(1) and jail_set(2)

2016-12-14 Thread Michael Grimm
Isaac (.ike) Levy wrote: > Can I specify multiple IP interfaces and assign IP’s to them using jail.conf? Not sure if I understand your question correctly, but I do define the following in my jail.conf for VNET jails: # # host dependent global settings # $ip6prefixLOCAL = "fd00:dead:be

Re: multiple interfaces for jail.conf(1) and jail_set(2)

2016-12-14 Thread Isaac (.ike) Levy
Wow, that’s rad Michael, > On Dec 14, 2016, at 3:30 PM, Michael Grimm wrote: > > Isaac (.ike) Levy wrote: > >> Can I specify multiple IP interfaces and assign IP’s to them using jail.conf? > > Not sure if I understand your question correctly, but I do define the > following in my jail.conf f

Re: multiple interfaces for jail.conf(1) and jail_set(2)

2016-12-14 Thread Michael Grimm
Isaac (.ike) Levy wrote > Wow, that’s rad Michael, > >> On Dec 14, 2016, at 3:30 PM, Michael Grimm wrote: >> >> Isaac (.ike) Levy wrote: >> >>> Can I specify multiple IP interfaces and assign IP’s to them using >>> jail.conf? >> >> Not sure if I understand your question correctly, but I do

Re: multiple interfaces for jail.conf(1) and jail_set(2)

2016-12-14 Thread Isaac (.ike) Levy
Wow, > On Dec 14, 2016, at 3:53 PM, Michael Grimm wrote: > >> Two questions though: >> >> - I’m confused how you define the shell style $ variables in your individual >> jail settings above, e.g. ‘$ip4_addr_2 = 10.1.1.2;’, why/how does that work? >> Is that a variable to be expanded, or some

Re: multiple interfaces for jail.conf(1) and jail_set(2)

2016-12-14 Thread Michael Grimm
Isaac (.ike) Levy wrote: >> I do use "service jail start/stop" because that will obey my pre-defined >> starting/stopping order of jails (which I do need to have, e.g. dns before >> mail and such) in /etc/rc.conf >> >> jail_enable="YES" >> jail_reverse_stop="YES" >> jail_list="d

Re: Closing ports in jail with ipfw

2016-12-14 Thread Ernie Luzar
marcel wrote: Le Mon, 05 Dec 2016 08:31:19 +0800, Ernie Luzar a écrit : marcel wrote: Hi there, I've created a jail and when I do a nmap on his IP, I can see that port 25 and 22 are open but I don't want. So i've tried to create an IPFW rule by adding 'ipwf -q add 00290 deny all from router