On Tue, 17 Oct 2017 15:17:16 +0000 Andrew Hotlab <andrew.hot...@hotmail.com> wrote:
> root@BSD11:~ # cat /etc/jail.conf > exec.start = "/bin/sh /etc/rc"; > exec.stop = "/bin/sh /etc/rc.shutdown"; > exec.clean; > mount.devfs; > jtest01 { > host.hostname = "jtest01.test.lab"; > path = /usr/jails/jtest01; > ip4.addr = "em0|172.21.10.101/32"; > persist; > allow.raw_sockets; > exec.fib = "1"; > } Andrew, do you have the ability to remove allow.raw_sockets line from jtest01 jail and try to ping it while tcpdumping icmp on em1? You should see reply packets leaving em1. Thank you in advance. -- Before enlightenment - chop wood, draw water. After enlightenment - chop wood, draw water. Marko Cupać https://www.mimar.rs/ _______________________________________________ freebsd-jail@freebsd.org mailing list https://lists.freebsd.org/mailman/listinfo/freebsd-jail To unsubscribe, send any mail to "freebsd-jail-unsubscr...@freebsd.org"