IP address assignments to jails using ezjail

[doug at safeport.com]

On Fri, 23 Dec 2016, James B. Byrne via freebsd-questions wrote:

>
> On Thu, December 22, 2016 22:25, Ernie Luzar wrote:
>
>>
>> 3. Take ubound out of the mix by not starting that jail. Then use only
>> ip addresses in your host to jail ssh command.
>>
>> 4. What is output of issuing host ssh command to a jail? Does host
>> answer?
>>
>
> Inbound ssh to the jail works:
>
> $ ssh -vv 192.168.216.196
> OpenSSH_5.3p1, OpenSSL 1.0.1e-fips 11 Feb 2013
> debug1: Reading configuration data /etc/ssh/ssh_config
> debug1: Applying options for *
> debug2: ssh_connect: needpriv 0
> debug1: Connecting to 192.168.216.196 [192.168.216.196] port 22.
> debug1: Connection established.
> . . .
> Password for user1 at hlldrupal:
>
>
> Outbound ssh from the jail does not:
>
>
> # ssh -vv 192.168.216.22
> OpenSSH_7.2p2, OpenSSL 1.0.2j-freebsd  26 Sep 2016
> debug1: Reading configuration data /etc/ssh/ssh_config
> debug2: resolving "192.168.216.22" port 22
> debug2: ssh_connect_direct: needpriv 0
> debug1: Connecting to 192.168.216.22 [192.168.216.22] port 22.
> debug1: connect to address 192.168.216.22 port 22: Operation timed out
> ssh: connect to host 192.168.216.22 port 22: Operation timed out
>
>
> There is no firewall running on either the jail or the jail host.

Can you ssh from the host?