Broadcast under Jail problems
jelmer
sociologieopzaterdag at gmail.com
Wed Nov 18 13:56:57 UTC 2009
(create a virtual network interface, and use packet filter)
# ifconfig lo1 create
# ifconfig lo1 inet 10.0.1.1 netmask 255.255.255.0
# touch /etc/start_if.lo1
# echo "ifconfig lo1 create" >> /etc/start_if.lo1
# cp /usr/share/examples/pf/pf.conf /etc/
(existance of pf.conf is just necessary, later I setup a complete one)
(allow networking for jails - required for the installation of ports)
* # echo 'nat on bge0 from lo1:network to any -> (bge0)' >> /etc/pf.conf
# pfctl -d
# pfctl -e -f /etc/pf.conf
# echo '
and use this in rc.conf
interfaces="lo0 bge0"
cloned_interfaces="lo1"
ifconfig_re0="inet <PUBL_IP> netmask 255.255.255.128 -rxcsum -txcsum"
ifconfig_re0_alias0="inet <PUBL_IP_2> netmask 255.255.255.128"
ifconfig_lo1="inet 10.0.1.1 netmask 255.255.255.0"
ifconfig_lo1_alias0="inet 10.0.1.2/24"
ifconfig_lo1_alias1="inet 10.0.1.3/32"
On Tue, Nov 17, 2009 at 1:00 PM, <freebsd-jail-request at freebsd.org> wrote:
> Send freebsd-jail mailing list submissions to
> freebsd-jail at freebsd.org
>
> To subscribe or unsubscribe via the World Wide Web, visit
> http://lists.freebsd.org/mailman/listinfo/freebsd-jail
> or, via email, send a message with subject or body 'help' to
> freebsd-jail-request at freebsd.org
>
> You can reach the person managing the list at
> freebsd-jail-owner at freebsd.org
>
> When replying, please edit your Subject line so it is more specific
> than "Re: Contents of freebsd-jail digest..."
>
>
> Today's Topics:
>
> 1. Re: Broadcast under Jail problems (Vagif Zeynalov)
> 2. Networking from jail (Scheithauer, Lars (FH))
> 3. Networking from jail - errata (Scheithauer, Lars (FH))
> 4. Re: Networking from jail - errata (Bjoern A. Zeeb)
> 5. AW: Networking from jail - errata (Scheithauer, Lars (FH))
> 6. Re: AW: Networking from jail - errata (Bjoern A. Zeeb)
> 7. AW: AW: Networking from jail - errata (Scheithauer, Lars (FH))
>
>
> ----------------------------------------------------------------------
>
> Message: 1
> Date: Mon, 16 Nov 2009 16:14:59 +0300
> From: "Vagif Zeynalov" <vagif at zeynalov.com>
> Subject: Re: Broadcast under Jail problems
> To: "Bjoern A. Zeeb" <bzeeb-lists at lists.zabbadoz.net>
> Cc: freebsd-jail at freebsd.org
> Message-ID: <A9332ADE8F494076A02DAFF06DAADA16 at vagifPC>
> Content-Type: text/plain; format=flowed; charset="iso-8859-1";
> reply-type=response
>
>
> >> ...I can provide more details if it will be necessary...
> >
> > error ogs from the application would be interesting to see which
> > (sys)call return which error so that we can narrow it down.
> >
>
> You know, to make the answer I just rebuild the mediatomb on the clear jail
> machine and... the problem has been disappeared!
> It's very strange, because I already did it before few times.
>
> Whatever, sorry guys for disturb. ;-))
> I have to investigate, what did I change at last night in the system.
>
> Regards,
> Vagif
>
>
>
> ------------------------------
>
> Message: 2
> Date: Tue, 17 Nov 2009 10:18:59 +0100
> From: "Scheithauer, Lars (FH)" <Lars.Scheithauer at fh-heidelberg.de>
> Subject: Networking from jail
> To: <freebsd-jail at freebsd.org>
> Message-ID:
> <
> 26040005B7F3AA41A0345BCE386CA09701C62A79 at FHCLUSRV-EX.dcs.fh-heidelberg.de>
>
> Content-Type: text/plain; charset="us-ascii"
>
> Hi everyone!
>
> I'm having a little trouble with my jail's networking and I'm not sure
> what to make of it.
>
> My jailhost has an IP of x.y.z.48, my test jail is x.y.z.49. The
> jailhost has both IP-adresses, the jail has just it's own:
>
> Jail# ifconfig
> bce0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu
> 1500
>
> options=1bb<RXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING,JUMBO_MTU,VLAN_HWCSUM,
> TSO4>
> ether xx:xx:xx:xx:xx:10
> inet x.y.z.60 netmask 0xffffffc0 broadcast x.y.z.63
> media: Ethernet autoselect (1000baseSX <full-duplex>)
> status: active
> [...]
> Host# ifconfig
> bce0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu
> 1500
>
> options=1bb<RXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING,JUMBO_MTU,VLAN_HWCSUM,
> TSO4>
> ether xx:xx:xx:xx:xx:10
> inet x.y.z.61 netmask 0xffffffc0 broadcast x.y.z.63
> inet x.y.z.60 netmask 0xffffffc0 broadcast x.y.z.63
> media: Ethernet autoselect (1000baseSX <full-duplex>)
> status: active
> [...]
>
> I am able to access the ssh-server running on the jail, and I am able to
> access the proxyserver of our network via telnet and get some pages of
> the internet. However, if I want to install something from the ports,
> the jail is unable to fetch it:
>
> Jail# cd /usr/ports/ftp/wget
> Jail# make
> ===> Vulnerability check disabled, database not found
> ===> Found saved configuration for wget-1.11.4_1
> => wget-1.11.4.tar.bz2 doesn't seem to exist in /usr/ports/distfiles/.
> => Attempting to fetch from http://ftp.gnu.org/gnu/wget/.
> fetch: http://ftp.gnu.org/gnu/wget/wget-1.11.4.tar.bz2: Operation timed
> out
> => Attempting to fetch from ftp://ftp.gnu.org/gnu/wget/.
> [...]
>
> I've set the appropriate environment variables HTTP_PROXY, HTTPS_PROXY
> and FTP_PROXY. If I test the connection with netcat, I get the following
> error message:
> # nc -zvw 1 -x 'proxy.example.com:8080' www.freebsd.org 80
> nc: read failed (0/3): Broken pipe
>
> The funny thing is, that I have no problem installing ports from the
> Host-system. From what I can tell, all the config files are correct:
>
> Jail# cat /etc/rc.conf
> sshd_enable="YES"
> ifconfig_bce0="inet x.y.z.60 netmask 255.255.255.192"
> defaultrouter="x.y.z.62"
> hostname="jail.example.com"
>
> Host# cat /etc/rc.conf
> sshd_enable="NO"
> ifconfig_bce0="inet x.y.z.61 netmask 255.255.255.192"
> defaultrouter="x.y.z.62"
> hostname="host.example.com"
> ipv6_enable="NO"
> jail_enable="YES"
> jail_set_hostname_allow="NO"
> jail_list="jail"
> jail_jail_hostname="jail"
> jail_jail_ip="x.y.z.60" jail_jail_rootdir="my/jail/root"
> jail_jail_devfs_enable="YES"
>
> Any ideas?
>
> Best Regards,
> Lars
>
>
> ------------------------------
>
> Message: 3
> Date: Tue, 17 Nov 2009 10:48:59 +0100
> From: "Scheithauer, Lars (FH)" <Lars.Scheithauer at fh-heidelberg.de>
> Subject: Networking from jail - errata
> To: <freebsd-jail at freebsd.org>
> Message-ID:
> <
> 26040005B7F3AA41A0345BCE386CA09701C62A7A at FHCLUSRV-EX.dcs.fh-heidelberg.de>
>
> Content-Type: text/plain; charset="iso-8859-1"
>
> Quick note:
> Forgot to replace two values.
> Jail - x.y.z.61
> Host - x.y.z.60
> Router - x.y.z.62
>
>
> -----Ursprüngliche Nachricht-----
> Von: owner-freebsd-jail at freebsd.org [mailto:owner-freebsd-jail at freebsd.org]
> Im Auftrag von Scheithauer, Lars (FH)
> Gesendet: Dienstag, 17. November 2009 10:19
> An: freebsd-jail at freebsd.org
> Betreff: Networking from jail
>
> Hi everyone!
>
> I'm having a little trouble with my jail's networking and I'm not sure
> what to make of it.
>
> My jailhost has an IP of x.y.z.48, my test jail is x.y.z.49. The
> jailhost has both IP-adresses, the jail has just it's own:
>
> Jail# ifconfig
> bce0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu
> 1500
>
> options=1bb<RXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING,JUMBO_MTU,VLAN_HWCSUM,
> TSO4>
> ether xx:xx:xx:xx:xx:10
> inet x.y.z.60 netmask 0xffffffc0 broadcast x.y.z.63
> media: Ethernet autoselect (1000baseSX <full-duplex>)
> status: active
> [...]
> Host# ifconfig
> bce0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu
> 1500
>
> options=1bb<RXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING,JUMBO_MTU,VLAN_HWCSUM,
> TSO4>
> ether xx:xx:xx:xx:xx:10
> inet x.y.z.61 netmask 0xffffffc0 broadcast x.y.z.63
> inet x.y.z.60 netmask 0xffffffc0 broadcast x.y.z.63
> media: Ethernet autoselect (1000baseSX <full-duplex>)
> status: active
> [...]
>
> I am able to access the ssh-server running on the jail, and I am able to
> access the proxyserver of our network via telnet and get some pages of
> the internet. However, if I want to install something from the ports,
> the jail is unable to fetch it:
>
> Jail# cd /usr/ports/ftp/wget
> Jail# make
> ===> Vulnerability check disabled, database not found
> ===> Found saved configuration for wget-1.11.4_1
> => wget-1.11.4.tar.bz2 doesn't seem to exist in /usr/ports/distfiles/.
> => Attempting to fetch from http://ftp.gnu.org/gnu/wget/.
> fetch: http://ftp.gnu.org/gnu/wget/wget-1.11.4.tar.bz2: Operation timed
> out
> => Attempting to fetch from ftp://ftp.gnu.org/gnu/wget/.
> [...]
>
> I've set the appropriate environment variables HTTP_PROXY, HTTPS_PROXY
> and FTP_PROXY. If I test the connection with netcat, I get the following
> error message:
> # nc -zvw 1 -x 'proxy.example.com:8080' www.freebsd.org 80
> nc: read failed (0/3): Broken pipe
>
> The funny thing is, that I have no problem installing ports from the
> Host-system. From what I can tell, all the config files are correct:
>
> Jail# cat /etc/rc.conf
> sshd_enable="YES"
> ifconfig_bce0="inet x.y.z.60 netmask 255.255.255.192"
> defaultrouter="x.y.z.62"
> hostname="jail.example.com"
>
> Host# cat /etc/rc.conf
> sshd_enable="NO"
> ifconfig_bce0="inet x.y.z.61 netmask 255.255.255.192"
> defaultrouter="x.y.z.62"
> hostname="host.example.com"
> ipv6_enable="NO"
> jail_enable="YES"
> jail_set_hostname_allow="NO"
> jail_list="jail"
> jail_jail_hostname="jail"
> jail_jail_ip="x.y.z.60"
> jail_jail_rootdir="my/jail/root"
> jail_jail_devfs_enable="YES"
>
> Any ideas?
>
> Best Regards,
> Lars
> _______________________________________________
> freebsd-jail at freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-jail
> To unsubscribe, send any mail to "freebsd-jail-unsubscribe at freebsd.org"
>
>
> ------------------------------
>
> Message: 4
> Date: Tue, 17 Nov 2009 10:40:54 +0000 (UTC)
> From: "Bjoern A. Zeeb" <bzeeb-lists at lists.zabbadoz.net>
> Subject: Re: Networking from jail - errata
> To: "Scheithauer, Lars (FH)" <Lars.Scheithauer at fh-heidelberg.de>
> Cc: freebsd-jail at freebsd.org
> Message-ID: <20091117103601.G37440 at maildrop.int.zabbadoz.net>
> Content-Type: text/plain; charset="iso-8859-1"
>
> On Tue, 17 Nov 2009, Scheithauer, Lars (FH) wrote:
>
> Hi,
>
> > Quick note:
> > Forgot to replace two values.
> > Jail - x.y.z.61
> > Host - x.y.z.60
> > Router - x.y.z.62
> >
> >
> > -----Ursprüngliche Nachricht-----
> > Von: owner-freebsd-jail at freebsd.org [mailto:
> owner-freebsd-jail at freebsd.org] Im Auftrag von Scheithauer, Lars (FH)
> > Gesendet: Dienstag, 17. November 2009 10:19
> > An: freebsd-jail at freebsd.org
> > Betreff: Networking from jail
> >
> > Hi everyone!
> >
> > I'm having a little trouble with my jail's networking and I'm not sure
> > what to make of it.
> >
> > My jailhost has an IP of x.y.z.48, my test jail is x.y.z.49. The
> > jailhost has both IP-adresses, the jail has just it's own:
> >
> > Jail# ifconfig
> > bce0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu
> > 1500
> >
> > options=1bb<RXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING,JUMBO_MTU,VLAN_HWCSUM,
> > TSO4>
> > ether xx:xx:xx:xx:xx:10
> > inet x.y.z.60 netmask 0xffffffc0 broadcast x.y.z.63
> > media: Ethernet autoselect (1000baseSX <full-duplex>)
> > status: active
> > [...]
> > Host# ifconfig
> > bce0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu
> > 1500
> >
> > options=1bb<RXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING,JUMBO_MTU,VLAN_HWCSUM,
> > TSO4>
> > ether xx:xx:xx:xx:xx:10
> > inet x.y.z.61 netmask 0xffffffc0 broadcast x.y.z.63
> > inet x.y.z.60 netmask 0xffffffc0 broadcast x.y.z.63
> > media: Ethernet autoselect (1000baseSX <full-duplex>)
> > status: active
> > [...]
> >
> > I am able to access the ssh-server running on the jail, and I am able to
> > access the proxyserver of our network via telnet and get some pages of
> > the internet. However, if I want to install something from the ports,
> > the jail is unable to fetch it:
> >
> > Jail# cd /usr/ports/ftp/wget
> > Jail# make
> > ===> Vulnerability check disabled, database not found
> > ===> Found saved configuration for wget-1.11.4_1
> > => wget-1.11.4.tar.bz2 doesn't seem to exist in /usr/ports/distfiles/.
> > => Attempting to fetch from http://ftp.gnu.org/gnu/wget/.
> > fetch: http://ftp.gnu.org/gnu/wget/wget-1.11.4.tar.bz2: Operation timed
> > out
> > => Attempting to fetch from ftp://ftp.gnu.org/gnu/wget/.
> > [...]
> >
> > I've set the appropriate environment variables HTTP_PROXY, HTTPS_PROXY
> > and FTP_PROXY. If I test the connection with netcat, I get the following
> > error message:
> > # nc -zvw 1 -x 'proxy.example.com:8080' www.freebsd.org 80
> > nc: read failed (0/3): Broken pipe
>
> The usual thing I am interested at that point is - does name
> resolution work properly from within the jail? /etc/resolv.conf setup
> correctly etc?
>
>
>
> > The funny thing is, that I have no problem installing ports from the
> > Host-system. From what I can tell, all the config files are correct:
> >
> > Jail# cat /etc/rc.conf
> > sshd_enable="YES"
> > ifconfig_bce0="inet x.y.z.60 netmask 255.255.255.192"
> > defaultrouter="x.y.z.62"
> > hostname="jail.example.com"
>
> That's not going to work, really (the ifconfig, defaultrouter, and
> unless you changed the defaults on the host system not even the
> hostname). You should actually remove those.
>
>
> > Host# cat /etc/rc.conf
> > sshd_enable="NO"
> > ifconfig_bce0="inet x.y.z.61 netmask 255.255.255.192"
> > defaultrouter="x.y.z.62"
> > hostname="host.example.com"
> > ipv6_enable="NO"
> > jail_enable="YES"
> > jail_set_hostname_allow="NO"
> > jail_list="jail"
> > jail_jail_hostname="jail"
> > jail_jail_ip="x.y.z.60"
> > jail_jail_rootdir="my/jail/root"
> > jail_jail_devfs_enable="YES"
>
> That doesn't really match your ifconfig output from above; something
> on the host system would have to set the IP address of the host. I
> would expect something like (you may have mixed jail and host
> addresses so properly sort this):
>
> # host system IP address
> ifconfig_bce0=inet x.y.z.61 netmask 255.255.255.192"
> # jail IP address
> ifconfig_bce0_alias0=inet x.y.z.60 netmask 255.255.255.255"
>
> Note that the alias has a /32 netmask.
>
>
> /bz
>
> --
> Bjoern A. Zeeb It will not break if you know what you are doing.
>
> ------------------------------
>
> Message: 5
> Date: Tue, 17 Nov 2009 12:18:40 +0100
> From: "Scheithauer, Lars (FH)" <Lars.Scheithauer at fh-heidelberg.de>
> Subject: AW: Networking from jail - errata
> To: <freebsd-jail at freebsd.org>
> Cc: "Bjoern A. Zeeb" <bzeeb-lists at lists.zabbadoz.net>
> Message-ID:
> <
> 26040005B7F3AA41A0345BCE386CA09701C62A7D at FHCLUSRV-EX.dcs.fh-heidelberg.de>
>
> Content-Type: text/plain; charset="iso-8859-1"
>
> Hi Bjoern,
>
> thanks for the clarification, I changed the values according to your
> suggestions. However, it did not resolve the problem.
>
> I've checked the proxy logfiles and it seems, that the Makefile(s) don't
> try to access the proxy at all while fetching files. Is there any reason,
> why the Makefile(s) should not use the *_PROXY-variables on the jails?
>
> Best Regards,
> Lars
>
>
>
> -----Ursprüngliche Nachricht-----
> Von: owner-freebsd-jail at freebsd.org [mailto:owner-freebsd-jail at freebsd.org]
> Im Auftrag von Bjoern A. Zeeb
> Gesendet: Dienstag, 17. November 2009 11:41
> An: Scheithauer, Lars (FH)
> Cc: freebsd-jail at freebsd.org
> Betreff: Re: Networking from jail - errata
>
> On Tue, 17 Nov 2009, Scheithauer, Lars (FH) wrote:
>
> Hi,
>
> > Quick note:
> > Forgot to replace two values.
> > Jail - x.y.z.61
> > Host - x.y.z.60
> > Router - x.y.z.62
> >
> >
> > -----Ursprüngliche Nachricht-----
> > Von: owner-freebsd-jail at freebsd.org [mailto:
> owner-freebsd-jail at freebsd.org] Im Auftrag von Scheithauer, Lars (FH)
> > Gesendet: Dienstag, 17. November 2009 10:19
> > An: freebsd-jail at freebsd.org
> > Betreff: Networking from jail
> >
> > Hi everyone!
> >
> > I'm having a little trouble with my jail's networking and I'm not sure
> > what to make of it.
> >
> > My jailhost has an IP of x.y.z.48, my test jail is x.y.z.49. The
> > jailhost has both IP-adresses, the jail has just it's own:
> >
> > Jail# ifconfig
> > bce0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu
> > 1500
> >
> > options=1bb<RXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING,JUMBO_MTU,VLAN_HWCSUM,
> > TSO4>
> > ether xx:xx:xx:xx:xx:10
> > inet x.y.z.60 netmask 0xffffffc0 broadcast x.y.z.63
> > media: Ethernet autoselect (1000baseSX <full-duplex>)
> > status: active
> > [...]
> > Host# ifconfig
> > bce0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu
> > 1500
> >
> > options=1bb<RXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING,JUMBO_MTU,VLAN_HWCSUM,
> > TSO4>
> > ether xx:xx:xx:xx:xx:10
> > inet x.y.z.61 netmask 0xffffffc0 broadcast x.y.z.63
> > inet x.y.z.60 netmask 0xffffffc0 broadcast x.y.z.63
> > media: Ethernet autoselect (1000baseSX <full-duplex>)
> > status: active
> > [...]
> >
> > I am able to access the ssh-server running on the jail, and I am able to
> > access the proxyserver of our network via telnet and get some pages of
> > the internet. However, if I want to install something from the ports,
> > the jail is unable to fetch it:
> >
> > Jail# cd /usr/ports/ftp/wget
> > Jail# make
> > ===> Vulnerability check disabled, database not found
> > ===> Found saved configuration for wget-1.11.4_1
> > => wget-1.11.4.tar.bz2 doesn't seem to exist in /usr/ports/distfiles/.
> > => Attempting to fetch from http://ftp.gnu.org/gnu/wget/.
> > fetch: http://ftp.gnu.org/gnu/wget/wget-1.11.4.tar.bz2: Operation timed
> > out
> > => Attempting to fetch from ftp://ftp.gnu.org/gnu/wget/.
> > [...]
> >
> > I've set the appropriate environment variables HTTP_PROXY, HTTPS_PROXY
> > and FTP_PROXY. If I test the connection with netcat, I get the following
> > error message:
> > # nc -zvw 1 -x 'proxy.example.com:8080' www.freebsd.org 80
> > nc: read failed (0/3): Broken pipe
>
> The usual thing I am interested at that point is - does name
> resolution work properly from within the jail? /etc/resolv.conf setup
> correctly etc?
>
>
>
> > The funny thing is, that I have no problem installing ports from the
> > Host-system. From what I can tell, all the config files are correct:
> >
> > Jail# cat /etc/rc.conf
> > sshd_enable="YES"
> > ifconfig_bce0="inet x.y.z.60 netmask 255.255.255.192"
> > defaultrouter="x.y.z.62"
> > hostname="jail.example.com"
>
> That's not going to work, really (the ifconfig, defaultrouter, and
> unless you changed the defaults on the host system not even the
> hostname). You should actually remove those.
>
>
> > Host# cat /etc/rc.conf
> > sshd_enable="NO"
> > ifconfig_bce0="inet x.y.z.61 netmask 255.255.255.192"
> > defaultrouter="x.y.z.62"
> > hostname="host.example.com"
> > ipv6_enable="NO"
> > jail_enable="YES"
> > jail_set_hostname_allow="NO"
> > jail_list="jail"
> > jail_jail_hostname="jail"
> > jail_jail_ip="x.y.z.60"
> > jail_jail_rootdir="my/jail/root"
> > jail_jail_devfs_enable="YES"
>
> That doesn't really match your ifconfig output from above; something
> on the host system would have to set the IP address of the host. I
> would expect something like (you may have mixed jail and host
> addresses so properly sort this):
>
> # host system IP address
> ifconfig_bce0=inet x.y.z.61 netmask 255.255.255.192"
> # jail IP address
> ifconfig_bce0_alias0=inet x.y.z.60 netmask 255.255.255.255"
>
> Note that the alias has a /32 netmask.
>
>
> /bz
>
> --
> Bjoern A. Zeeb It will not break if you know what you are doing.
>
>
> ------------------------------
>
> Message: 6
> Date: Tue, 17 Nov 2009 11:27:40 +0000 (UTC)
> From: "Bjoern A. Zeeb" <bzeeb-lists at lists.zabbadoz.net>
> Subject: Re: AW: Networking from jail - errata
> To: "Scheithauer, Lars (FH)" <Lars.Scheithauer at fh-heidelberg.de>
> Cc: freebsd-jail at freebsd.org
> Message-ID: <20091117112535.L37440 at maildrop.int.zabbadoz.net>
> Content-Type: TEXT/PLAIN; charset=US-ASCII; format=flowed
>
> On Tue, 17 Nov 2009, Scheithauer, Lars (FH) wrote:
>
> Hi,
>
> > thanks for the clarification, I changed the values according to your
> suggestions. However, it did not resolve the problem.
>
> Did you aslo check resolv.conf inside the jail?
> Does host www.freebsd.org work?
>
>
> > I've checked the proxy logfiles and it seems, that the Makefile(s) don't
> try to access the proxy at all while fetching files. Is there any reason,
> why the Makefile(s) should not use the *_PROXY-variables on the jails?
>
> I assume the proxy is squid and that the proxy itself works?
> What if you set the http_proxy variables to an IP address rather than
> the name (don't use 127.0.0.1 as address, just to rule that out as
> well).
>
> /bz
>
> --
> Bjoern A. Zeeb It will not break if you know what you are doing.
>
>
> ------------------------------
>
> Message: 7
> Date: Tue, 17 Nov 2009 12:40:51 +0100
> From: "Scheithauer, Lars (FH)" <Lars.Scheithauer at fh-heidelberg.de>
> Subject: AW: AW: Networking from jail - errata
> To: "Bjoern A. Zeeb" <bzeeb-lists at lists.zabbadoz.net>
> Cc: freebsd-jail at freebsd.org
> Message-ID:
> <
> 26040005B7F3AA41A0345BCE386CA09701C62A80 at FHCLUSRV-EX.dcs.fh-heidelberg.de>
>
> Content-Type: text/plain; charset="iso-8859-1"
>
> Hi Bjoern,
>
> I did, but the error was somewhere else. I set the proxy through
> set http_proxy="http://proxy.example.com:8080"
> while the correct version would be
> setenv http_proxy http://proxy.example.com:8080
>
> In both cases, "echo $http_proxy" returns the correct entry. Could you
> explain the difference between set and setenv?
>
> Best Regards,
> Lars
>
>
>
> -----Ursprüngliche Nachricht-----
> Von: Bjoern A. Zeeb [mailto:bzeeb-lists at lists.zabbadoz.net]
> Gesendet: Dienstag, 17. November 2009 12:28
> An: Scheithauer, Lars (FH)
> Cc: freebsd-jail at freebsd.org
> Betreff: Re: AW: Networking from jail - errata
>
> On Tue, 17 Nov 2009, Scheithauer, Lars (FH) wrote:
>
> Hi,
>
> > thanks for the clarification, I changed the values according to your
> suggestions. However, it did not resolve the problem.
>
> Did you aslo check resolv.conf inside the jail?
> Does host www.freebsd.org work?
>
>
> > I've checked the proxy logfiles and it seems, that the Makefile(s) don't
> try to access the proxy at all while fetching files. Is there any reason,
> why the Makefile(s) should not use the *_PROXY-variables on the jails?
>
> I assume the proxy is squid and that the proxy itself works?
> What if you set the http_proxy variables to an IP address rather than
> the name (don't use 127.0.0.1 as address, just to rule that out as
> well).
>
> /bz
>
> --
> Bjoern A. Zeeb It will not break if you know what you are doing.
>
>
> ------------------------------
>
> _______________________________________________
> freebsd-jail at freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-jail
> To unsubscribe, send any mail to "freebsd-jail-unsubscribe at freebsd.org"
>
>
> End of freebsd-jail Digest, Vol 120, Issue 2
> ********************************************
>
More information about the freebsd-jail
mailing list