Problems with network in jail

[Miroslav Lachman]

Spil Oss wrote:
> Hi Peter,
> 
> Thanks a lot! Will read up on that. (luckily I do speak
> german/swiss-german). From discussions on ##FreeBSD IRC I learned that
> it is not recommended to use lo0 for jails!
> 
> On FreeBSD-6.3 I succesfully used lo0/127.0.0.2 for my mysql jail that
> needed to be addressed only locally, but ONLY LOCALLY, no other
> access. It may be possible to add a line similar to
>      00100 divert 8668 ip from any to any in via xl0
> to my ipfw/NAT config, but being warned, I'm not going down that path.
> 
> Since I moved my portbuild jail to bridge0/172.17.2.17 it works as
> expected, without device mem!
> And to boot I made errors when creating my aliases (ifconfig bridge0
> inet 172.17.2.17 netmask *172.17.2.255* in stead of 255.255.255.0)

You can create lo1 if you want:
ifconfig create lo1
ifconfig lo1 inet 172.17.2.17 netmask 255.255.255.0

in rc.conf
cloned_interfaces="lo1"
ifconfig_lo1="inet 172.17.2.17 netmask 255.255.255.0"

And then use NAT / RDR in your favorite firewall (I am using PF)

Miroslav Lachman