No subject

Ekkehard 'Ekki' Gehm gehm at doom-labs.net
Wed May 6 12:29:36 UTC 2020


Hey!

On your HOST (not in the jail):
Have a look at file /usr/local/etc/ezjail/YOURJAILNAME...
Edit the row saying:
export jail_YOURJAILNAME_parameters=""
to read:
export jail_YOURJAILNAME_parameters="allow.raw_sockets=1"

then restart your jail by typing: ezjail-admin restart

That will enable "ping" in your jail.

after that, in your jail, edit the file /etc/resolv.conf to read:

nameserver 8.8.8.8
nameserver 8.8.4.4

Note: a # in front of a line means it is comment...

After that. try "ping 8.8.8.8". This will check if you can reach a host
"outside". output should be something like:

% ping 8.8.8.8
PING 8.8.8.8 (8.8.8.8): 56 data bytes
64 bytes from 8.8.8.8: icmp_seq=0 ttl=57 time=16.560 ms
64 bytes from 8.8.8.8: icmp_seq=1 ttl=57 time=16.355 ms
64 bytes from 8.8.8.8: icmp_seq=2 ttl=57 time=17.158 ms
64 bytes from 8.8.8.8: icmp_seq=3 ttl=57 time=17.259 ms

(CTRL-C will stop the ping)

if that works. try "host www.freebsd.org" this will check if name
resolution works...Output should be:
% host www.freebsd.org
www.freebsd.org is an alias for wfe0.nyi.freebsd.org.
wfe0.nyi.freebsd.org has address 96.47.72.84
wfe0.nyi.freebsd.org has IPv6 address 2610:1c1:1:606c::50:15
wfe0.nyi.freebsd.org mail is handled by 0 .

If that works, the rest should also. Exept pkg isn't installed at all ;-)

Ekki







-- 
Ekkehard Gehm           *       mailto:gehm at doom-labs.net
Doom-Labs Inc.          *       http://www.doom-labs.net
Frag Content            *       PGP-Key:
http://www.doom-labs.net/~gehm/pubkey.asc

Experience is what you get when you were expecting something else.

Microsoft:      "Where do you want to go today?"
Linux:          "Where do you want to go tomorrow?"
FreeBSD:        "Are you guys coming or what?"


More information about the freebsd-jail mailing list