On Sat, 30 Sep 2017 10:38:58 +0000 Andrew Hotlab <andrew.hot...@hotmail.com> wrote:
> Hi Marko. I'm running an almost identical setup, but I do not have > this issue: ICMP echo reply packets are sent from the right > interface. The only difference is that I didn't defined additional > lo1 and lo2 interfaces, but I guess it shouldn't be the cause. > > I'm running releng/10.3. Which release are you working on? Hi Andrew, sorry for late reply. I'm running 11.1-RELEASE-p1. I am definitely seeing packets with source addresses of my DMZ jails (fib2) exiting through interface on local LAN. Those are mostly icmp echo replies that should be coming from jails but are not due to the fact that jails don't have raw sockets enables. So, echo replies are returned from host (and not jails), whose default gateway is on internal network. Would freebsd-net be more appropriate list for this problem? Thank you in advance, -- Before enlightenment - chop wood, draw water. After enlightenment - chop wood, draw water. Marko Cupać https://www.mimar.rs/ _______________________________________________ freebsd-jail@freebsd.org mailing list https://lists.freebsd.org/mailman/listinfo/freebsd-jail To unsubscribe, send any mail to "freebsd-jail-unsubscr...@freebsd.org"
