How to connect a jail to the web ?

Valentin Bud valentin.bud at
Tue Aug 10 11:42:48 UTC 2010

On Tue, Aug 10, 2010 at 2:01 PM, Brice ERRANDONEA <berrandonea at>wrote:

> Hello,
> I've just created my first FreeBSD jail in order to install a web server
> inside.
> But I don't know how to connect it to the web. When I try pinging a http
> website, it doesn't work. Of course, it works when I do it from outside the
> jail.
> Another problem, probably linked to the first one, I can't run rc within
> the
> jail, even as the jail's root. It says : permission denied.
> Here's how I built and started my jail. I had already run make buildworld
> when
> upgrading to 8.1 release :
> # mkdir /usr/prison
> # cd /usr/src
> # make installworld DESTDIR=/usr/prison
> # make distribution DESTDIR=/usr/prison
> # mount -t devfs devfs /usr/prison/dev
> # jail -c path=/usr/prison host.hostname=ServeurWeb ip4.addr=
> persist
> # jail /usr/prison ServeurWeb csh
> I guess this must be a very basic question but please help me.


 To be able to ping from inside the jail you need raw sockets
activated on the host.

sysctl security.jail.allow_raw_sockets=1

For ease of configuration you could use ezjail - a jail administration
framework written
in shell or if you plan to use lots of jails (20+) you could try qjail which
is also a jail
administration framework.

have a great day,
network warrior

More information about the freebsd-questions mailing list