Cannot ping6 inside jail

Ernie Luzar luzar722 at gmail.com
Tue Aug 16 21:07:15 UTC 2016


Bertram Scharpf wrote:
> On Tuesday, 16. Aug 2016, 15:47:39 -0400, Ernie Luzar wrote:
>> Bertram Scharpf wrote:
>>> Inside a jail:
>>>
>>>   # ping6 ::1
>>>   ping6: socket: Protocol not supported
>>>
>>> When I ask "ifconfig", there are no IPv6 adresses.
>>>
>>> What did I miss?
>> If your talking about issuing the ping command from within a non-vimage 
>> jail then its denied by design as a security risk. You have to enable 
>> allow.raw.sockets to get ping command to work.
> 
> I _had_ set "allow.raw_sockets = 1;" in "jail.conf".
> 
> I say
> 
>   # sysctl security.jail.allow_raw_sockets=1
>   # service jail restart myjail
> 
> but still I see
> 
>   # ping6 ::1
>   ping6: socket: Protocol not supported
> 
> and
> 
>   # ifconfig | grep inet6 | wc -l
>          0
> 
> and
> 
>   # telnet ::1 80
>   Trying ::1...
>   telnet: socket: Protocol not supported
> 
> Bertram
> 
> 

Verify that regular ping works.
Ping -c 4 8.8.8.8

Are you running a custom kernel where ipv6 support is removed?

What RELEASE version of FreeBSD are you running?







More information about the freebsd-questions mailing list