RE: Jail question

2013-03-01 Thread Teske, Devin
On Fri, 01 Mar 2013, Bernt Hansson wrote: On 2013-02-27 11:19, Bernt Hansson wrote: 2013-02-26 15:18, Teske, Devin skrev: Yes, this is possible. When I get into work, I'll share with you the recipe Please do share with us. Ok I rephrase my question. How do I install

Re: Jail question

2013-02-27 Thread Bernt Hansson
2013-02-26 15:18, Teske, Devin skrev: Yes, this is possible. When I get into work, I'll share with you the recipe Please do share with us. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To

RE: Jail question

2013-02-27 Thread dteske
\ /usr/lib/libnetgraph.so.4 \ ; do cp -pfv $file $dir$file done -Original Message- From: Bernt Hansson [mailto:b...@bananmonarki.se] Sent: Wednesday, February 27, 2013 2:19 AM To: Teske, Devin Cc: questions FreeBSD Subject: Re: Jail question 2013-02-26 15:18

RE: Jail question

2013-02-26 Thread Teske, Devin
...@freebsd.org] on behalf of Bernt Hansson [b...@bananmonarki.se] Sent: Tuesday, February 26, 2013 5:23 AM To: questions FreeBSD Subject: Jail question Hello list! I would like to install an old version of freebsd let's say 4.6 in a jail. Is that possible. Host is 8.3-stable amd64

Re: Jail question

2013-02-26 Thread Daniel O'Callaghan
Bernt Hansson wrote: I would like to install an old version of freebsd let's say 4.6 in a jail. Is that possible. Host is 8.3-stable amd64 Things like ps won't run, but you can copy static binaries from host:/rescue to jail:/{bin,sbin} as appropriate and that helps a lot. I just installed a

Re: Noob Jail question.

2010-12-17 Thread Dave
Hi.. I've actualy got a messing about PC with 8.1 on, that I often play with during lunch times at work. Trouble is, been working through lunchtimes for the last week or three. Self teaching is good, you certainly learn things, but though I'm not in need of instant self gratification, it's a

Re: Noob Jail question.

2010-12-17 Thread Da Rock
On 12/18/10 02:58, Dave wrote: Hi.. I've actualy got a messing about PC with 8.1 on, that I often play with during lunch times at work. Trouble is, been working through lunchtimes for the last week or three. Self teaching is good, you certainly learn things, but though I'm not in need of

Re: Noob Jail question.

2010-12-16 Thread Boris Samorodov
Dave d...@g8kbv.demon.co.uk writes: I've been reading the FreeBSD Manual (a dangerous thing to do during lunchtimes!) relating to Jails. Other than making my head spin, I'm finding it a tad dificult finding out just what you can/cant do with a Jail. Mainly, because I'm not familiar with

Re: Noob Jail question.

2010-12-16 Thread Dave
On 16 Dec 2010 at 14:50, Da Rock wrote: On 12/16/10 09:32, Dave wrote: Hi. As some of you may remember, I've managed to build a F'BSD V8.0 based system that provides me with:- . . . . Hi.. Indexer and Da Rock, many thanks, more reading, and some fiddling needed I think. Cheers.

Re: Noob Jail question.

2010-12-16 Thread Indexer
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Indexer and Da Rock, many thanks, more reading, and some fiddling needed I think. It is the best way to learn. Setup a VM of fbsd 8.1 on your computer, and just play with it on that with jails, and learn what you can an cant do. Remember

Noob Jail question.

2010-12-15 Thread Dave
Hi. As some of you may remember, I've managed to build a F'BSD V8.0 based system that provides me with:- Local GPS disiplined NTP server (working very well) the reason I built the thing in the first place, but it seems FreeBSD can do so much more, so I also have. Hiawatha webserver (also

Re: Noob Jail question.

2010-12-15 Thread Indexer
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 SSH remote login for admin needs (But not for root login) Also working well. Good! I think I'd like to run Hiawatha in a Jail, as it seems the right thing to do with something that will be exposed to the www. (Comments/advice?) - From

Re: Noob Jail question.

2010-12-15 Thread Da Rock
On 12/16/10 09:32, Dave wrote: Hi. As some of you may remember, I've managed to build a F'BSD V8.0 based system that provides me with:- Local GPS disiplined NTP server (working very well) the reason I built the thing in the first place, but it seems FreeBSD can do so much more, so I also

Re: Jail question

2010-10-18 Thread Ivan Voras
On 10/14/10 18:20, Matthew Law wrote: I have a single box on which I would like to run openvpn, smtp (postfix, dspam, greylist, clamav), imap (dovecot) apache22 and bind. This box also acts as a network gateway so it would give an attacker carte blanche to the internal nets if it was

Re: Jail question

2010-10-18 Thread bdsfbsd
On Fri, 15 Oct 2010 09:32:44 -0400, Jerry freebsd.u...@seibercom.net wrote: On Fri, 15 Oct 2010 08:35:39 -0400 Fbsd8 fb...@a1poweruser.com articulated: Check out qjail. It has been submitted for addition to the ports collection, but the ports dept is very slow in performing their task of

Re: Jail question

2010-10-18 Thread Jerry
On Fri, 15 Oct 2010 13:38:17 -0400 bdsf...@att.net bdsf...@att.net articulated: On Fri, 15 Oct 2010 09:32:44 -0400, Jerry freebsd.u...@seibercom.net wrote: On Fri, 15 Oct 2010 08:35:39 -0400 Fbsd8 fb...@a1poweruser.com articulated: Check out qjail. It has been submitted for addition

Re: Jail question

2010-10-18 Thread Matthew Law
On Fri, October 15, 2010 2:54 pm, Ivan Voras wrote: Since jails can do many things there are many helper utilities that can do much to simplify the process. If you can hack python, you can, for example, modify my script at http://ivoras.sharanet.org/stuff/mkjails.py which I've used to create

Re: Jail question

2010-10-18 Thread Ian Smith
In freebsd-questions Digest, Vol 333, Issue 2, Message: 1 On Fri, 15 Oct 2010 13:38:17 -0400 bdsf...@att.net wrote: On Fri, 15 Oct 2010 09:32:44 -0400, Jerry freebsd.u...@seibercom.net wrote: On Fri, 15 Oct 2010 08:35:39 -0400 Fbsd8 fb...@a1poweruser.com articulated: Check out

Re: Jail question

2010-10-15 Thread Fbsd8
Matthew Law wrote: I have a single box on which I would like to run openvpn, smtp (postfix, dspam, greylist, clamav), imap (dovecot) apache22 and bind. This box also acts as a network gateway so it would give an attacker carte blanche to the internal nets if it was compromised, which makes me

Re: Jail question

2010-10-15 Thread Jerry
On Fri, 15 Oct 2010 08:35:39 -0400 Fbsd8 fb...@a1poweruser.com articulated: Check out qjail. It has been submitted for addition to the ports collection, but the ports dept is very slow in performing their task of adding new ports to the system. So in the mean time you can get qjail from

Jail question

2010-10-14 Thread Matthew Law
I have a single box on which I would like to run openvpn, smtp (postfix, dspam, greylist, clamav), imap (dovecot) apache22 and bind. This box also acts as a network gateway so it would give an attacker carte blanche to the internal nets if it was compromised, which makes me nervous. The plan is

Re: Jail question

2010-10-14 Thread doug
On Thu, 14 Oct 2010, Matthew Law wrote: I have a single box on which I would like to run openvpn, smtp (postfix, dspam, greylist, clamav), imap (dovecot) apache22 and bind. This box also acts as a network gateway so it would give an attacker carte blanche to the internal nets if it was

Re: Jail question

2010-10-14 Thread krad
On 14 October 2010 19:19, doug d...@fledge.watson.org wrote: On Thu, 14 Oct 2010, Matthew Law wrote: I have a single box on which I would like to run openvpn, smtp (postfix, dspam, greylist, clamav), imap (dovecot) apache22 and bind. This box also acts as a network gateway so it would give

Re: dovecot/jail question

2010-04-13 Thread perikillo
I have: (Samba+LDAP = PDC + Dovecot+Postix ) ---JailA (amavisd-new+spamassassin+clamd --spam gateway ) ---JailB FreeBSD 8.0 Release. My src.conf for my jails: WITHOUT_AMD=yes WITHOUT_APM=yes WITHOUT_ASSERT_DEBUG=yes WITHOUT_ATM=yes WITHOUT_AUTHPF=yes WITHOUT_BIND=yes

Re: dovecot/jail question

2010-01-20 Thread Michael Grimm
Sam Fourman Jr. sfour...@gmail.com wrote: On Tue, Jan 19, 2010 at 4:18 PM, Jim stapleton...@gmail.com wrote: First, Thanks all for the help with my previous sendmail question. I rebuilt the jail without postfix and that at least seems happy. So does this mean that you can NOT run postfix in

pf + jail question.

2010-01-19 Thread C. C. Tang
Hi all, May be this question is better to post on -pf or -jail but I really don't know where the problem is. So post here first. I have a FreeBSD-8.0-RELEASE-p2 box with two NICs acting as gateway using pf (with ftp-proxy enabled) in my home network configured as follow: LAN: 10.7.13.0/24

pf + jail question.

2010-01-19 Thread C. C. Tang
Hi all, May be this question is better to post on -pf or -jail but I really don't know where the problem is. So post here first. I have a FreeBSD-8.0-RELEASE-p2 box with two NICs acting as gateway using pf (with ftp-proxy enabled) in my home network configured as follow: LAN: 10.7.13.0/24 ( +

dovecot/jail question

2010-01-19 Thread Jim
First, Thanks all for the help with my previous sendmail question. I rebuilt the jail without postfix and that at least seems happy. The main question; has anyone built/ran dovecot in a jail? It runs fine on the host system fine, but if I put it in a jail, I get issues with the !import_try

Re: dovecot/jail question

2010-01-19 Thread Sam Fourman Jr.
On Tue, Jan 19, 2010 at 4:18 PM, Jim stapleton...@gmail.com wrote: First, Thanks all for the help with my previous sendmail question. I rebuilt the jail without postfix and that at least seems happy. So does this mean that you can NOT run postfix in a FreeBSD 8 Jail? I didn't know this, I just

Re: dovecot/jail question

2010-01-19 Thread Jim
On Tue, Jan 19, 2010 at 10:41 PM, Sam Fourman Jr. sfour...@gmail.com wrote: On Tue, Jan 19, 2010 at 4:18 PM, Jim stapleton...@gmail.com wrote: First, Thanks all for the help with my previous sendmail question. I rebuilt the jail without postfix and that at least seems happy. So does this mean

Jail question

2007-12-17 Thread jhall
Ladies and Gentlemen, I want to check the understanding of jails. My understanding is a jail uses the existing kernel configuration and cannot use its own kernel configuration. Is this correct? Thanks, Jay ___ freebsd-questions@freebsd.org

Re: Jail question

2007-12-17 Thread Peter Schuller
I want to check the understanding of jails. My understanding is a jail uses the existing kernel configuration and cannot use its own kernel configuration. Is this correct? Yes. The jail is being executed by the same kernel as the host system. The jail just has restricted access to certain

jail question

2007-04-26 Thread Roberto Pereyra
hi I running fbsd 6.2 and I would like to my first jail setup, but I have this error when I start the jail (jail0): srv1# /etc/rc.d/jail start Configuring jails:. Starting jails:ifconfig: interface alias does not exist jail0. srv1# What I do wrong ? Thanks in advance. roberto This is my

Re: jail question

2007-04-26 Thread Duane Hill
On Thu, 26 Apr 2007, Roberto Pereyra wrote: hi I running fbsd 6.2 and I would like to my first jail setup, but I have this error when I start the jail (jail0): srv1# /etc/rc.d/jail start Configuring jails:. Starting jails:ifconfig: interface alias does not exist jail0. srv1# What I do wrong

Re: jail question

2007-04-26 Thread Karol Kwiatkowski
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Roberto Pereyra wrote: hi I running fbsd 6.2 and I would like to my first jail setup, but I have this error when I start the jail (jail0): srv1# /etc/rc.d/jail start Configuring jails:. Starting jails:ifconfig: interface alias does not

Re: jail question

2007-04-26 Thread Roberto Pereyra
Thanks to all!!! roberto 2007/4/26, Karol Kwiatkowski [EMAIL PROTECTED]: -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Roberto Pereyra wrote: hi I running fbsd 6.2 and I would like to my first jail setup, but I have this error when I start the jail (jail0): srv1# /etc/rc.d/jail start

another jail question

2007-03-24 Thread Jonathan Horne
is there a way to configure a jail to use more than one ip address? in the same sense of configuring an alias ip for any other freebsd host? thanks, jonathan ___ freebsd-questions@freebsd.org mailing list

Re: another jail question

2007-03-24 Thread Matthew Seaman
Jonathan Horne wrote: is there a way to configure a jail to use more than one ip address? in the same sense of configuring an alias ip for any other freebsd host? jail(8) only allows you one IP -- there are some patches around which will let you create jails with more IPs, and even better

RE: another jail question

2007-03-24 Thread Rick Apichairuk
-Original Message- From: [EMAIL PROTECTED] [mailto:owner-freebsd- [EMAIL PROTECTED] On Behalf Of Matthew Seaman Sent: Saturday, March 24, 2007 1:38 PM To: Jonathan Horne Cc: freebsd-questions@freebsd.org Subject: Re: another jail question Jonathan Horne wrote: is there a way

Re: another jail question

2007-03-24 Thread Wojciech Puchar
is there a way to configure a jail to use more than one ip address? in the same sense of configuring an alias ip for any other freebsd host? IMHO not. ___ freebsd-questions@freebsd.org mailing list

Re: another jail question

2007-03-24 Thread Vince
Wojciech Puchar wrote: is there a way to configure a jail to use more than one ip address? in the same sense of configuring an alias ip for any other freebsd host? IMHO not. Not entirely true apparently. see http://blog.cg.nu/?p=9 for details of someone who adapted PJD's patch for current

Re: another jail question

2007-03-24 Thread Meenoo Shivdasani
On 3/24/07, Jonathan Horne [EMAIL PROTECTED] wrote: is there a way to configure a jail to use more than one ip address? in the same sense of configuring an alias ip for any other freebsd host? As others have posted, not without either doing IP address manipulation or using the patches

Re: jail question

2007-02-12 Thread Alain Wolf
On 11.02.2007 12:54, * Dino Vliet wrote: Hi folks, I'm installing a nice system to use as my multimedia box and already succeeded with geom-mirror. I want to use a jail to isolate the p2p applications like amule/emule and want to make sure that they only write to an encrypted disk

jail question

2007-02-11 Thread Dino Vliet
Hi folks, I'm installing a nice system to use as my multimedia box and already succeeded with geom-mirror. I want to use a jail to isolate the p2p applications like amule/emule and want to make sure that they only write to an encrypted disk (currently RTFM on geli and gbde) However, I was

Re: jail question

2007-02-11 Thread Bill Moran
Dino Vliet [EMAIL PROTECTED] wrote: Hi folks, I'm installing a nice system to use as my multimedia box and already succeeded with geom-mirror. I want to use a jail to isolate the p2p applications like amule/emule and want to make sure that they only write to an encrypted disk (currently

jail question -- why can a user programatically see more than one IP address inside a jail?

2005-08-06 Thread Chad Leigh -- Shire.Net LLC
I have some jails. On 5.3R i386 Some software (some C based, some java) for various reasons, like licensing, look at all the IP addresses/interfaces available in the running system. Inside the jail they return more than just the jails IP address. For example, FrontBase database

sendmail and jail question

2002-12-30 Thread Didier Wiroth
Hey, I would like to use sendmail only to send daily reports of it's own host and it's running jails, to an outside mail system! host (192.168.0.2) with sendmail - should send mail/reports etc to [EMAIL PROTECTED] jail1 (192.168.0.3) with sendmail - should send mail/reports etc to [EMAIL

Re: sendmail and jail question

2002-12-30 Thread Matthew Seaman
On Mon, Dec 30, 2002 at 12:01:38PM +0100, Didier Wiroth wrote: I would like to use sendmail only to send daily reports of it's own host and it's running jails, to an outside mail system! host (192.168.0.2) with sendmail - should send mail/reports etc to [EMAIL PROTECTED] jail1

Jail question

2002-12-04 Thread Didier Wiroth
Hey, I'm a freebsd newbie. I was experimenting with jails. I've build an entire jail under /usr/local/jail/test which I'm accessing through the network using ssh. I thought that you can't grep any path or any information outside the jail but when I use the command df, I can clearly see the disk

Re: Jail question

2002-12-04 Thread Paul Everlund
On Wed, 4 Dec 2002, Didier Wiroth wrote: Hey, I'm a freebsd newbie. I was experimenting with jails. I've build an entire jail under /usr/local/jail/test which I'm accessing through the network using ssh. I thought that you can't grep any path or any information outside the jail but when I

Re: Jail question

2002-12-04 Thread Ruben de Groot
On Wed, Dec 04, 2002 at 02:35:11PM +0100, Paul Everlund typed: On Wed, 4 Dec 2002, Didier Wiroth wrote: Hey, I'm a freebsd newbie. I was experimenting with jails. I've build an entire jail under /usr/local/jail/test which I'm accessing through the network using ssh. I thought that

Another Jail Question

2002-12-04 Thread Jeff MacDonald
Hi, I have been thinking about running 2 jails on my home server one for work sensitive data, the other for personal fun stuff. However i only have 1 ip at my house [static]. Could i take the server taht will have jails on it, put it behind a natd box so it has 2 ip's [192.168.0.1 and .2] and

Re: Another Jail Question

2002-12-04 Thread Ruben de Groot
On Wed, Dec 04, 2002 at 09:27:33AM -0500, Jeff MacDonald typed: Hi, I have been thinking about running 2 jails on my home server one for work sensitive data, the other for personal fun stuff. However i only have 1 ip at my house [static]. Could i take the server taht will have jails on

Re: Another Jail Question

2002-12-04 Thread Kirk Strauser
At 2002-12-04T14:27:33Z, Jeff MacDonald [EMAIL PROTECTED] writes: Could i take the server taht will have jails on it, put it behind a natd box so it has 2 ip's [192.168.0.1 and .2] and just make the nat box, forward packets to teh appropriate jail based upon what port they come in on ? Yep.

Re: Another Jail Question

2002-12-04 Thread Alex Hayward
On Wed, 4 Dec 2002, Jeff MacDonald wrote: Hi, I have been thinking about running 2 jails on my home server one for work sensitive data, the other for personal fun stuff. However i only have 1 ip at my house [static]. Could i take the server taht will have jails on it, put it behind a

Re: Another Jail Question

2002-12-04 Thread Marc G. Fournier
On Wed, 4 Dec 2002, Jeff MacDonald wrote: Hi, I have been thinking about running 2 jails on my home server one for work sensitive data, the other for personal fun stuff. However i only have 1 ip at my house [static]. Could i take the server taht will have jails on it, put it behind a

Re: Another Jail Question

2002-12-04 Thread Dan Pelleg
Jeff MacDonald [EMAIL PROTECTED] writes: Hi, I have been thinking about running 2 jails on my home server one for work sensitive data, the other for personal fun stuff. However i only have 1 ip at my house [static]. Could i take the server taht will have jails on it, put it behind a

RE: Another Jail Question

2002-12-04 Thread Jeff MacDonald
PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Dan Pelleg Sent: Wednesday, December 04, 2002 11:08 AM To: Jeff MacDonald Cc: [EMAIL PROTECTED] Subject: Re: Another Jail Question Jeff MacDonald [EMAIL PROTECTED] writes: Hi, I have been thinking about running 2 jails on my home

RE: Another Jail Question

2002-12-04 Thread Marc G. Fournier
On Wed, 4 Dec 2002, Jeff MacDonald wrote: You can run PostgreSQL in a jail - though you do need to turn the jail.sysvipc_allowed sysctl on first. You can also run it in the host environment and talk via TCP if you wish. some folks have said this is a security risk, as the shared mem is

RE: Another Jail Question

2002-12-04 Thread Jeff MacDonald
: [EMAIL PROTECTED] Subject: RE: Another Jail Question On Wed, 4 Dec 2002, Jeff MacDonald wrote: Yeah, i think i'll go the safe route and keep away from shared memory as such will likly run it on the host. not sure what your sparc is, but you might look at putting postgresql over

RE: Another Jail Question

2002-12-04 Thread Marc G. Fournier
On Wed, 4 Dec 2002, Jeff MacDonald wrote: I run qmail, cause combined with vpopmail, it kicks ass for virtual domains. Postfix with CyrusIMAPd v2.2, cause, well, Cyrus IMAPd is just in a class all its own :) Note that CyrusIMAPd was extended several months back to do full virtual domain under

RE: Another Jail Question

2002-12-04 Thread Jeff MacDonald
, or is it a matter of know what direcotires to make.. etc ? jeff. -Original Message- From: Marc G. Fournier [mailto:[EMAIL PROTECTED]] Sent: Wednesday, December 04, 2002 1:33 PM To: Jeff MacDonald Cc: Alex Hayward; [EMAIL PROTECTED] Subject: RE: Another Jail Question On Wed, 4 Dec 2002, Jeff

RE: Another Jail Question

2002-12-04 Thread Philip Hallstrom
server is a dual PII 300 with 512 megs of ram, this should be fine to handle 2 jails, right ? unless you start gettinjg into high memory circumstances (ie. jakarta-tomcat is a major dog for memory), 2 wouldn't be a problem ... Just for comparison... I'm running four jails -

RE: Another Jail Question

2002-12-04 Thread Marc G. Fournier
- From: Marc G. Fournier [mailto:[EMAIL PROTECTED]] Sent: Wednesday, December 04, 2002 1:33 PM To: Jeff MacDonald Cc: Alex Hayward; [EMAIL PROTECTED] Subject: RE: Another Jail Question On Wed, 4 Dec 2002, Jeff MacDonald wrote: I run qmail, cause combined with vpopmail, it kicks

RE: Another Jail Question

2002-12-04 Thread Marc G. Fournier
On Wed, 4 Dec 2002, Philip Hallstrom wrote: server is a dual PII 300 with 512 megs of ram, this should be fine to handle 2 jails, right ? unless you start gettinjg into high memory circumstances (ie. jakarta-tomcat is a major dog for memory), 2 wouldn't be a problem ... Just

RE: Another Jail Question

2002-12-04 Thread Jeff MacDonald
PM To: Jeff MacDonald Cc: Alex Hayward; [EMAIL PROTECTED] Subject: RE: Another Jail Question On Wed, 4 Dec 2002, Jeff MacDonald wrote: wow, the sieve filtering really turns me on [yuck i know]. currently with qmail/vpopmail i've not found a really great way to do filtering of things

RE: Another Jail Question

2002-12-04 Thread Marc G. Fournier
On Wed, 4 Dec 2002, Jeff MacDonald wrote: Any idea when it will be merged into the main code base ? i tend to stay away from development branches.. not sure, I believe not until 2.2 is fully released ... since I'm one of the ones that pushed for it to happen, I kinda had to be one of those

Re: Another Jail Question

2002-12-04 Thread Vallo Kallaste
On Wed, Dec 04, 2002 at 03:47:10PM -0400, Marc G. Fournier [EMAIL PROTECTED] wrote: Hardly any traffic... it's an internal dev machine hit by about 10 people... 101 Jails: last pid: 13467; load averages: 21.09, 13.50, 19.54up 17+12:23:50 13:43:55 1576 processes:4 running, 1572