8.0 still allow creating ipv6 udp socket in jail without ipv6 ip

[Bjoern A. Zeeb]

On Sat, 25 Jul 2009, Mykola Dzham wrote:

Hi,

> After r188146 creating tcp ipv6 socket in jail without ipv6 ip is not
> allowed, but udp socket is allowed.

I cannot really follow what you are trying to say as wrt IPv4 and IPv6
sockets and what about UDP.

Your sample further down is trying to use an IPv4 address on an IPv6
Datagram socket which is an error either way.

Prior to FreeBSD 7.2 IPv6 hadn't been supported at all for jails.

With 7.2 it was possible to create IPv6 sockets (but only shortly and
then fail on bind/connect/...).  With the commit you reference the
"Protocol not supported" came back in case there was no address of
that address family for a given jail.

With 8 the primary syntax for jails has changed and the "backward
compat mode" again allows you to create a socket on a jail even if
no address of the same family was configured for the jail.

This should be addressed by the following patch:
http://people.freebsd.org/~bz/20090727-01-jail8-legacy.diff

Can you give it a try and report if that fixes your problem?

Regards,
Bjoern

-- 
Bjoern A. Zeeb                      The greatest risk is not taking one.