vpn client (pptp) inside a jail

Nikos Vassiliadis nvass at teledomenet.gr
Fri Jan 5 02:56:00 PST 2007


On Thursday 04 January 2007 16:26, Andras GELANYI wrote:
> i do not really have a complete plan at the moment but an idea to use a
> jail on my remote system as a sandbox. i mean i would like to set up a jail
> and use it (sometimes) as client / virtual machine in a remote network
> through some kind of tunneling without any modification to the base system
> and sometimes as a regular host to test and compile some completelydifferent
> stuff.

AFAIK you won't be able to do that with jails. Mainly because:

Modifying the network configuration, including interfaces, addresses and
routing table, is prohibited. Accessing raw, divert and routing sockets are
prohibited. For example, a jail is bound to only one IP address and firewall
rules cannot be changed.

Taken from here:
http://en.wikipedia.org/wiki/Freebsd_jail#Security

Nikos


More information about the freebsd-questions mailing list