Assign Lookback address 127.0.0.1 to jail

[s7r at sky-ip.org]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 6/11/2014 3:20 AM, Allan Jude wrote:
> On 2014-06-10 20:07, s7r at sky-ip.org wrote:
>> Hi,
>> 
>> Operating system is FreeBSD 10.0 64 Bit
>> 
>> I have installed ezjail from ports and properly configured a jail
>> with its own static and dedicated IP address. Everything works
>> good, it's just that I have an application which requires to talk
>> to another one via RPC on IP 127.0.0.1, and I have noticed the
>> jail does not have a lo0 interface or localhost 127.0.0.1 IP
>> address.
>> 
>> This is bad because the application has no choice but to bind to
>> the public IP address assigned to the jail, and it's not safe.
>> 
>> How can I add a lo0 interface with IP 127.0.0.1 to a jail?
>> 
>> Thanks in advance. 
>> _______________________________________________ 
>> freebsd-jail at freebsd.org mailing list 
>> http://lists.freebsd.org/mailman/listinfo/freebsd-jail To
>> unsubscribe, send any mail to
>> "freebsd-jail-unsubscribe at freebsd.org"
>> 
> 
> Does it have to be 127.0.0.1? You can add an alias like 127.0.0.2
> to the lo0 interface and use that.
> 
> Inside the jail, 127.0.0.1 is mapped to the IP of the jail.
> 
> Using ezjail, you can also allocate more than 1 IP address to a
> jail by comma separating them
> 
> You can also make it automatically alias the IPs for you with the
> syntax:
> 
> em0|192.168.0.10,lo0|127.0.0.2 etc
> 
> 

Thank you Allan for your fast reply.

I have the jail already created via:
# ezjail-admin create <jailname> <em0|public IP>

How do I modify the already existing jail to have 127.0.0.2, for
example, or can't  I just have 127.0.0.1 in the jail?

- -- 
s7r
PGP Fingerprint: 7C36 9232 5ABD FB0B 3021 03F1 837F A52C 8126 5B11
PGP Pubkey: http://www.sky-ip.org/s7r@sky-ip.org.asc
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.17 (MingW32)
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/

iQEcBAEBAgAGBQJTl6FtAAoJEIN/pSyBJlsRV9MIAJtCIdKxWlHmtRPfiv7lUzoV
U8NrQ0S7qPjlhQyvHha3gqid1MIm7gUHAHMcdpV++QSlk8P6PuOHNVTfthVq2hhV
l9vIyFS7/e60a0QLOdtay9z9u4tyb2VFGa7uNewj8RSzmi9Yj0QeLvYZRMhk7SbG
DEeb4k8+7etKvjHyv4OwF1dqrnOIgNMxsmhF3wxKLieahNFJWIJBzgRXIYZJTuwj
5LbwV9CYakVWlYdNNHh5gc9MkSvdC93MeUFXRjtsdFiHnda+kmDTwGhtXoI+NIZJ
zpfQLAQZv8j7awkQnxpgiTNGfJ3NyZaMRGZZsLp007uiA1JahDggXIt6l0g1fqI=
=LY3I
-----END PGP SIGNATURE-----