Cant reach Jailed services from internet.

Mogamat Abrahams lists at tabits.co.za
Thu May 30 12:51:21 UTC 2013


> 
> Do you have   gateway_enable="YES"  statement in the host's rc.conf?
Added it and not difference.
> 
> Is the jails /etc/resolv.conf populated with the correct info?
> 
Yes, name resolution works ok - i can reach out from the jail to other 
services on the internet.

> You said "Netstat on the host and jail also show services
> listening on those addresses on the correct ports."
> 
> If what you mean is the host has processes listening on the SAME
> ip address / ports as the jails are listening on, then your jails
> will never get any unsolicited traffic because the host always gets
> access to that traffic first and processes it without the jail ever 
> knowing about it.
I only have sshd configured on the host, that on the 67. ip address. So I 
assume those listening ports are coming from the jail as its on the same IP 
and ports 80 and 81 

Any other suggestions?

M






More information about the freebsd-jail mailing list