Two jail questions

Adam Vande More amvandemore at
Thu Oct 19 18:13:10 UTC 2017

On Thu, Oct 19, 2017 at 1:00 PM, Steve Kargl <
sgk at> wrote:

> > sshd in the jail needs to run on a different port if you're using the
> same
> > ip, otherwise if you use an independent networking stack you would
> > configure as normal.
> So, then this comes down to
> ssh normal at a.b.c.d         <-- host system's sshd listening on default
> port
> ssh -p 1111 guest at a.b.c.d  <-- jailed sshd listening on port 1111

On a non-VNET/VIMAGE jail, this is the standard way.  For a VNET/VIMAGE you
could do a regular

ssh guest at w.x.y.z

since the jail would have it's own real ip.  That is assuming you added the
guest user to the jail and all the networking/routing is good.


More information about the freebsd-questions mailing list