OpenVPN within a Jail under 6.x ...

[Marc G. Fournier]

On Wed, 8 Feb 2006, Oliver Fromme wrote:

> Marc G. Fournier <scrappy at hub.org> wrote:
> > Is this possible?  I'm reading through the man pages for openvpn, and
> > doubt that it is with 4.x, since it requires access to /dev, but with 6.x
> > using devfs to mount dev into the jail, is it possible to set it up?
>
> The problem isn't related to /dev.  It doesn't matter
> whether your device nodes come from devfs (FreeBSD 6)
> or have been created manually with MAKEDEV (FreeBSD 4),
> both of which can be used for jails.
>
> The problem is that you need to configure interfaces
> (tun(4) or tap(4)) to set up the VPN, but ifconfig(8)
> does not work inside a jail.  That means you cannot
> set up a VPN inside a jail.  However, you can _use_
> it within a jail, of course, if you assign the IP of
> the VPN connection to the jail

'k, how would you do that?  I thought you could only assign one IP to a 
jail, both in 4.x and 6.x?


----
Marc G. Fournier           Hub.Org Networking Services (http://www.hub.org)
Email: scrappy at hub.org           Yahoo!: yscrappy              ICQ: 7615664