Assign Lookback address 127.0.0.1 to jail

[Allan Jude]

On 2014-06-10 20:07, s7r at sky-ip.org wrote:
> Hi,
> 
> Operating system is FreeBSD 10.0 64 Bit
> 
> I have installed ezjail from ports and properly configured a jail with
> its own static and dedicated IP address. Everything works good, it's
> just that I have an application which requires to talk to another one
> via RPC on IP 127.0.0.1, and I have noticed the jail does not have a
> lo0 interface or localhost 127.0.0.1 IP address.
> 
> This is bad because the application has no choice but to bind to the
> public IP address assigned to the jail, and it's not safe.
> 
> How can I add a lo0 interface with IP 127.0.0.1 to a jail?
> 
> Thanks in advance.
> _______________________________________________
> freebsd-jail at freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-jail
> To unsubscribe, send any mail to "freebsd-jail-unsubscribe at freebsd.org"
> 

Does it have to be 127.0.0.1? You can add an alias like 127.0.0.2 to the
lo0 interface and use that.

Inside the jail, 127.0.0.1 is mapped to the IP of the jail.

Using ezjail, you can also allocate more than 1 IP address to a jail by
comma separating them

You can also make it automatically alias the IPs for you with the syntax:

em0|192.168.0.10,lo0|127.0.0.2
etc


-- 
Allan Jude

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 899 bytes
Desc: OpenPGP digital signature
URL: <http://lists.freebsd.org/pipermail/freebsd-jail/attachments/20140610/b4c8fd1a/attachment.sig>