Re: JAIL

In varianta Jail din FreeBSD 5.2.1 nu este posibil sa folosesti 
utilitare ca ping si traceroute, deoarece acestea implica utilizarea 
"raw sockets".
Exista patch-uri care schimba aceasta situatie. Nu stiu care va fi 
situatia pt. FreeBSD 5.3 inca.
Poate vei gasi interesant urmatorul link:

http://kerneltrap.org/node/view/3075



Andrei Constantin C. wrote:
> Salut,
>
>  Am incercat sa instalez jail pe un fbsd 5.2 release.
>  Totul a mers super, configurarea este:
>
> #!/bin/sh
> D=/usr/local/jail
> cd /usr/src
> mkdir -p $D
> make world DESTDIR=$D
> cd etc
> make distribution DESTDIR=$D
> mount_devfs devfs $D/dev
> cd $D
> ln -sf dev/null kernel
>  
>  si il pornesc cu jail /usr/local/jail/ depressed 81.21.36.62 /bin/sh
> Serverul normal are ip 81.21.36.61. Dupa cum vedeti, am incercat sa ii
> pun alt ip la jail.
>
> root@liquidmind:[root]# jail /usr/local/jail/ depressed 81.21.36.62 /bin/sh
> # ifconfig
> dc0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500
>         inet 81.21.36.62 netmask 0xffffffff broadcast 81.21.36.62
>         ether 00:08:a1:2b:d6:86
>         media: Ethernet autoselect (100baseTX <full-duplex>)
>         status: active
> lo0: flags=8049<UP,LOOPBACK,RUNNING,MULTICAST> mtu 16384
> # ping 81.21.36.61
> ping: socket: Operation not permitted
> #
>
> Poate sa-mi zica si mie ce mai trebuie setat/configurat?
> Problema este ca nu sunt local, am access remote, si nu vreau sa-l
> crashuiesc.
>
> Mersi.
--
Claudiu Dragalina-Paraipan
e-mail: dr.clau-aaj5L+LQ+kOvSplVBqRQBQ@xxxxxxxxxxxxxxxx