Cant reach Jailed services from internet.

Ian Smith smithi at nimnet.asn.au
Tue May 28 05:14:38 UTC 2013


On Mon, 27 May 2013 20:01:29 +0000, Mogamat Abrahams wrote:
 > Mats A. Hansen <matsh at ...> writes:
 > 
 > > Any reason you are running your webjail on the broadcast IP for the 
 > > subnet? IP range for your 0xfffffffc net would be (.77|.78).
 > 
 > Hi,
 > 
 > Thanks, however thats the info I got the from people providing the machine :

That's a worry .. you won't do any good trying to use the broadcast 
address.  Mats is right, you only get 2 usable addresses with a /30.

 > The hosts rc.conf:
 > 
 > ipv4_addrs_em0="67.x.x.x/27 174.x.x.76-79/30"
 > 
 > Will try some of the other ips and see how it goes.

If/when you're running a firewall, it's common to just drop any packets 
addressed to the network address (here .76) and broadcast address (.79) 
coming in from the outside.

Perhaps you need a /29, which would give you 6 usable addresses?

cheers, Ian


More information about the freebsd-jail mailing list