jailed process listening on host addresses

Andrew Hotlab andrew.hotlab at hotmail.com
Wed Jan 4 01:22:54 UTC 2012


I noticed a strange behavior some days ago, but I can't say how much long it 
have been happening for. Some processes which are running in different jails 
on the same host seems to be listening on all host IPs. Here is an example:

#sockstat -4l | grep "4   \*:"
root     mDNSRespon 69801 3  udp4   *:45258               *:*
root     mDNSRespon 69801 4  udp4   *:5353                *:*
root     unfsd      69761 3  udp4   *:2049                *:*
root     unfsd      69761 4  tcp4   *:2049                *:*
root     rpcbind    69703 7  udp4   *:111                 *:*
root     rpcbind    69703 8  udp4   *:732                 *:*
root     rpcbind    69703 9  tcp4   *:111                 *:*
921      transmissi 29851 10 udp4   *:*                   *:*
931      asterisk   29805 25 udp4   *:*                   *:*


It's happening on several host right now (all are running FreeBSD/amd64 
8.2-RELEASE-p5), with both UDP and TCP listeners. Any jail is using a single 
unicast IP address. I really hope to miss something important... or should I 
guess that these processes are "escaping" from the jails?! :S

Thank very much for any explanation anyone would be so kind to give me.

Andrew



More information about the freebsd-jail mailing list