can't build perl-5.8.8 in a jail

2006-05-22 Thread Andy Greenwood
I'm trying to build perl 5.8.8 inside a jail and it won't build. I always error at the same spot. Below is the last 100 lines out of make. Anyone have any ideas? Finding dependencies for pp_ctl.o. Finding dependencies for pp_sys.o. Finding dependencies for regcomp.o. Finding depend

Re: JAIL setup

2006-05-14 Thread Matt Bostock
Brian Josefsen wasd.dk> writes: > can anyone point me to howto about configuring jailed subserver? http://erdgeist.org/arts/software/ezjail/ Matt :) ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-quest

Re: JAIL setup

2006-05-14 Thread Brian Josefsen
On Sun, May 14, 2006 at 01:38:34PM +0200, Wojciech Puchar wrote: > can anyone point me to howto about configuring jailed subserver? read the jail and jails man pages are you're getting there fast. -- Med venlig hilsen / Best regards Brian

JAIL setup

2006-05-14 Thread Wojciech Puchar
can anyone point me to howto about configuring jailed subserver? ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"

proftpd & jail

2006-05-10 Thread trobalo
we have a problem with proftp running in a jail -> pf.conf ext_if="em0" ip_ext="*.*.*.*" ip_jail="127.0.0.3" rdr on $ext_if proto tcp from any to $ip_ext port 20 -> $ip_jail port 20 rdr on $ext_if proto tcp from any to $ip_ext port 21 -> $ip_jail port

Jails won't start when using /etc/rc.d/jail

2006-05-06 Thread Matt Bostock
Hi, I'm using EZJail (http://erdgeist.org/arts/software/ezjail/) on FreeBSD 6.0. EZJail uses the /etc/rc.d/jail mechanism. My problem is that whilst I can start a jail using the 'jail' command manually (and type commands, start services etc in the jail), when I try to start it

jail uptime information

2006-05-03 Thread topi
hi, i'm creating a group jailed servers, and using nagios to monitor them. i've seen that from a jailed server, the information shown by uptime is not related to the jail. in fact, 'uptime' inside jails doesn't see users logged (always equal to 0) and load is the same

Re: BIND inside a jail on FreeBSD 6.0

2006-05-02 Thread patrick
Thanks, that did the trick. I'm not running this in a jail because I'm paranoid or anything -- I just need a test environment, and I don't have an extra machine kicking around. :) Patrick On 5/1/06, David Robillard <[EMAIL PROTECTED]> wrote: BIND is trying to setup

Re: BIND inside a jail on FreeBSD 6.0

2006-05-01 Thread Chad Leigh -- Shire.Net LLC
On May 1, 2006, at 7:11 AM, David Robillard wrote: BIND is trying to setup a chroot(8) before it starts. If you're already inside a jail, then IMHO it is a little overkill (i.e. Running BIND in a chroot inside a jail). Check the BIND related values in rc.conf(5). The chroot(8) start

Re: BIND inside a jail on FreeBSD 6.0

2006-05-01 Thread David Robillard
-- Message: 23 Date: Fri, 28 Apr 2006 19:36:22 -0600 From: "Chad Leigh -- Shire.Net LLC" <[EMAIL PROTECTED]> Subject: Re: BIND inside a jail on FreeBSD 6.0 To: patrick <[EMAIL PROTECTED]> Cc: freebsd-questions@freebsd.org Message-ID: <[EMAIL

Re: BIND inside a jail on FreeBSD 6.0

2006-04-28 Thread Chad Leigh -- Shire.Net LLC
On Apr 28, 2006, at 6:57 PM, patrick wrote: I'm trying to run BIND inside a jail on FreeBSD 6.0, and I'm encountering the following problem: [EMAIL PROTECTED] /var/named]# /etc/rc.d/named start mount_devfs: Operation not permitted /etc/rc.d/named: WARNING: devfs_domount(): Unabl

BIND inside a jail on FreeBSD 6.0

2006-04-28 Thread patrick
I'm trying to run BIND inside a jail on FreeBSD 6.0, and I'm encountering the following problem: [EMAIL PROTECTED] /var/named]# /etc/rc.d/named start mount_devfs: Operation not permitted /etc/rc.d/named: WARNING: devfs_domount(): Unable to mount devfs on /var/named/dev devfs r

Jail function 6.x

2006-04-10 Thread Matthew Whittaker-Williams
Dear FreeBSD users, I`ve been using jails in FreeBSD for some time now and its a good solution for my purposes. Now for the question, is there some patch available that can provide the ability to set multiple ip` for a single jail? I know there was some patch for 4.x which did this, so I was

Re: Postfix inside a jail

2006-04-08 Thread Francisco Reyes
Vaaf writes: I'm trying to get FreeBSD 4.11-RELEASE, postfix-2.1.6,1 and mysql-5.0.16 working. I have a couple of postfix setups inside jails. The one thing you have to watch for is that, as far as I can tell, there is no 127.0.0.1.. inside the jail so you need to configure your filte

Re: Postfix inside a jail

2006-04-02 Thread Vaaf
gt;# where 192.168.111.111 is the ip-address of the jail > > -- cut -- > Didn't seem to make any difference. did you apply this for host + all jails ? restarted all the postfix-es and checked with ps whether they're all running ? > I still keep mynetworks right?

Re: Postfix inside a jail

2006-03-27 Thread albi
On Mon, 27 Mar 2006 22:30:44 +0200 Vaaf <[EMAIL PROTECTED]> wrote: > >i use several postfix-instances in jails and host, but with this > >option in /usr/local/etc/postfix/main.cf : > > > >inet_interfaces = 192.168.111.111 > ># where 192.168.111.111 is t

Re: Postfix inside a jail

2006-03-27 Thread Vaaf
llog is empty. The maillog.N files are all 122 bytes. So > nothing there. > Syslog is running, and it is configured to log to maillog. --- cut --- > However, mails to [EMAIL PROTECTED] doesn't arrive at > [EMAIL PROTECTED] I've used this setup on other boxes where they'

Re: Postfix inside a jail

2006-03-27 Thread albi
s are all 122 bytes. So > nothing there. > Syslog is running, and it is configured to log to maillog. --- cut --- > However, mails to [EMAIL PROTECTED] doesn't arrive at > [EMAIL PROTECTED] I've used this setup on other boxes where they've > worked just fine. within a

Postfix inside a jail

2006-03-27 Thread Vaaf
Hello! I'm trying to get FreeBSD 4.11-RELEASE, postfix-2.1.6,1 and mysql-5.0.16 working. Even though the setup seems flawless, it won't work. /var/log/maillog is empty. The maillog.N files are all 122 bytes. So nothing there. Syslog is running, and it is configured to log to maillog. This

Re: /usr/local/etc/rc.d not running for jail

2006-03-08 Thread Francisco Reyes
Philip Hallstrom writes: Put the following into the jail's /etc/rc.conf: early_late_divider="NETWORKING" Thanks! That worked. That worked for me. My memory is this isn't a *real* solution, but that it does the trick (going off some posts I found on the issue when this happened to me) It

Re: /usr/local/etc/rc.d not running for jail

2006-03-08 Thread Philip Hallstrom
I have a jail, running in FreeBSD 6, which starts sshd and syslogd, but doesn't start any of the programs from /usr/local/etc/rc.d All the appropriate variables are in /etc/rc.conf for the various programs (postfix, spamd, clamsmtp, freshclam). I am able to run the programs manuall

/usr/local/etc/rc.d not running for jail

2006-03-08 Thread Francisco Reyes
I have a jail, running in FreeBSD 6, which starts sshd and syslogd, but doesn't start any of the programs from /usr/local/etc/rc.d All the appropriate variables are in /etc/rc.conf for the various programs (postfix, spamd, clamsmtp, freshclam). I am able to run the programs manually by

Re: FreeNX in FreeBSD Jail

2006-03-02 Thread Ryan Rempel
On 3/1/06, Ryan Rempel <[EMAIL PROTECTED]> wrote: > > On 2/28/06, [EMAIL PROTECTED] <[EMAIL PROTECTED]> wrote: > > Has anyone had any experience running FreeNX in a FreeBSD Jail. It > > starts to connect then goes to connection failed, I can use XDMCP from the >

Re: Building a Jail in FreeBSD or NetBSD for a hosting environment

2006-03-01 Thread Nick Larsen
ks again. On 3/1/06, Pavel Duda <[EMAIL PROTECTED]> wrote: > > Nick Larsen wrote: > > Hey Members, > > > > I have done a little research on Jails and setting them up, and managed > to > > get one going at one stage and managed to somehow destroy it. > >

Re: FreeNX in FreeBSD Jail

2006-03-01 Thread Ryan Rempel
On 2/28/06, [EMAIL PROTECTED] <[EMAIL PROTECTED]> wrote: > > Has anyone had any experience running FreeNX in a FreeBSD Jail. It > starts to connect then goes to connection failed, I can use XDMCP from the > same > box and everything works fine, any suggestions? Thanks in Ad

FreeNX in FreeBSD Jail

2006-02-28 Thread matthew
Has anyone had any experience running FreeNX in a FreeBSD Jail. It starts to connect then goes to connection failed, I can use XDMCP from the same box and everything works fine, any suggestions? Thanks in Advance. ___ freebsd-questions@freebsd.org

Re: Building a Jail in FreeBSD or NetBSD for a hosting environment

2006-02-28 Thread Pavel Duda
Nick Larsen wrote: Hey Members, I have done a little research on Jails and setting them up, and managed to get one going at one stage and managed to somehow destroy it. I'm new to Jails, and I would like to use a real jail then just using a chroot jail. Where I work, we use the Ensim sof

Re: Building a Jail in FreeBSD or NetBSD for a hosting environment

2006-02-27 Thread Daniel
Hey Nick, On 2/28/06, Nick Larsen <[EMAIL PROTECTED]> wrote: > Hey Members, > > I have done a little research on Jails and setting them up, and managed to > get one going at one stage and managed to somehow destroy it. > I'm new to Jails, and I would like to use a r

Re: Building a Jail in FreeBSD or NetBSD for a hosting environment

2006-02-27 Thread Wes Santee
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Nick Larsen wrote: > [snip] > Also do I need an individual IP for each jail? because each physical server > will have 1 IP unless the customer requests a dedicated IP. > > Any help would be appreciated, and I have tried to researc

Building a Jail in FreeBSD or NetBSD for a hosting environment

2006-02-27 Thread Nick Larsen
Hey Members, I have done a little research on Jails and setting them up, and managed to get one going at one stage and managed to somehow destroy it. I'm new to Jails, and I would like to use a real jail then just using a chroot jail. Where I work, we use the Ensim software for hosting,

Re: VPN & Jail(s) ...

2006-02-26 Thread Fabian Keil
"Marc G. Fournier" <[EMAIL PROTECTED]> wrote: > On Sun, 26 Feb 2006, Igor Robul wrote: > > > On Wed, Feb 22, 2006 at 09:03:26PM -0400, Marc G. Fournier wrote: > >> > >> I asked this a little while ago, and had alot of good answers ... > >> but, after doing some thinking, I'm wondering if there mi

Re: VPN & Jail(s) ...

2006-02-26 Thread Marc G. Fournier
On Sun, 26 Feb 2006, Igor Robul wrote: On Wed, Feb 22, 2006 at 09:03:26PM -0400, Marc G. Fournier wrote: I asked this a little while ago, and had alot of good answers ... but, after doing some thinking, I'm wondering if there might be a better way of doing it, that removed the requirement for

Re: VPN & Jail(s) ...

2006-02-25 Thread Igor Robul
On Wed, Feb 22, 2006 at 09:03:26PM -0400, Marc G. Fournier wrote: > > I asked this a little while ago, and had alot of good answers ... but, > after doing some thinking, I'm wondering if there might be a better way of > doing it, that removed the requirement for 'hitting' the base operating > s

Zombie jail?

2006-02-24 Thread Francisco Reyes
I have a jail that after running /etc/rc.d/jail seems to stay around. jls 1 but if I do "pgrep -lfj 1" nothing is listed. I am able to enter the jail by "jexec 1 chs", but once inside it doesn't seem like anything is working. Is this basically a

Re: /etc/rc.d/jail can't stop jail

2006-02-23 Thread Francisco Reyes
Thanks to Valerio daelli for pointing out that the names I had in my rc.conf needed to be changed to match the actual jail name. The jail now starts, however trying to kill it still doesn't work. There is no error and running /etc/rc.d/jail mail stop shows Stopping jails: mail12. Ho

/etc/rc.d/jail can't stop jail

2006-02-22 Thread Francisco Reyes
Doing my first jail. I am able to start the jail manually using the jail command and using /etc/rc.d/jail start, however I am unable to stop the jail using /etc/rc.d jail. I get the error Stopping jails:cannot stop jail mail. No jail id in /var/run The name of the jail is "mail&quo

Re: VPN & Jail(s) ...

2006-02-22 Thread Marc G. Fournier
I asked this a little while ago, and had alot of good answers ... but, after doing some thinking, I'm wondering if there might be a better way of doing it, that removed the requirement for 'hitting' the base operating system ... If I ran something like FreeBSD in VMWare, would that work? Ar

Re: FreeBSD-6 + Jail + MultipleIP

2006-02-16 Thread Valerio daelli
I think somebody already spoke about that in this mailing list, anyway take a look at http://garage.freebsd.pl/ Bye Valerio Daelli On 2/16/06, mr sicon <[EMAIL PROTECTED]> wrote: > Anyone have a patch or know if and when it will be implemented into the base > jail system

FreeBSD-6 + Jail + MultipleIP

2006-02-15 Thread mr sicon
Anyone have a patch or know if and when it will be implemented into the base jail system? thanks ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[

VPN & Jail(s) ...

2006-01-27 Thread Marc G. Fournier
Can it be done, or does it have to be to the base server itself? If it can be done, can someone point me to a document that explains how to set one up? Thanks ... Marc G. Fournier Hub.Org Networking Services (http://www.hub.org) Email: [EMAIL PROTECTED] Yahoo!: yscr

courier-imap and different logging in jail

2006-01-24 Thread Giovanni P. Tirloni
Hi, I installed courier-imap 4.0.6 in a jail recently and it's logging to /var/log/maillog as 'couriertcpd'. That means I cannot use "!pop3d" and "!imapd" in syslog.conf to redirect those logs to another file. Strange enough this isn't how it works

ps "Bus error" under jail

2006-01-17 Thread Edwin
Hi, The machine is running FreeBSD 6.0-RELEASE and i am trying out jails on it I have followed the tutorial in jail's man page and everythings seems working fine, except the ps command. When I execute ps, it say "Bus error" Here is the gdb output: GNU gdb 6.1.1 [FreeBSD] Copyright 2004 Free Softw

RE: Multiple IP in jail?

2006-01-14 Thread Ruben Bloemgarten
If you use nat in conjuction with jails there is no need to add multiple ip's to the jails to be able to reach apache on multiple ip's, although I agree that it would be nice to be able to assign multiple ip's to a jail. Anyone ? Regards, Ruben -Original Message- From: [

Multiple IP in jail?

2006-01-14 Thread Petr Murmak
Hi! Is it possible to assign multiple IP to one jail on FreeBSD 6.0-STABLE? I want to use in jail apache for which i really need more than one IP. I found some patches for 5.0 but they are more than 2 years old without maintaining, so I didn't tried them.

can't build Java 1.5.0 on FreeBSD/i386 6.0-RELEASE (inside jail)

2006-01-11 Thread Chad Leigh -- Shire . Net LLC
Hi I have successfully built Java 1.4.2 inside a jail on 5.4, but am having problems doing the same thing for 1.5.0 on 6.0. I have all the Sun stuff downloaded as well as the linux 1.4.2 runtime port installed fine. The build ran for a million hours. At which point it came back with

Re: quotas + jail ?

2006-01-11 Thread Michal Mertl
Marc G. Fournier wrote: > On Wed, 11 Jan 2006, Michal Mertl wrote: > > > Vladimir Dvorak wrote: > >> Hello, > >> > >> I have simple question - is possible to use quotas in jail(8) environment ? > > > > Yes, it is, although with some restrictio

Re: quotas + jail ?

2006-01-11 Thread Ceri Davies
On 11 Jan 2006, at 16:36, Marc G. Fournier wrote: On Wed, 11 Jan 2006, Michal Mertl wrote: Vladimir Dvorak wrote: Hello, I have simple question - is possible to use quotas in jail(8) environment ? Yes, it is, although with some restrictions. You have to enable the disk quotas from the

Re: quotas + jail ?

2006-01-11 Thread Marc G. Fournier
On Wed, 11 Jan 2006, Michal Mertl wrote: Vladimir Dvorak wrote: Hello, I have simple question - is possible to use quotas in jail(8) environment ? Yes, it is, although with some restrictions. You have to enable the disk quotas from the host (have them listed in host's /etc/fstab)

Re: quotas + jail ?

2006-01-11 Thread Michal Mertl
Vladimir Dvorak wrote: > Hello, > > I have simple question - is possible to use quotas in jail(8) environment ? Yes, it is, although with some restrictions. You have to enable the disk quotas from the host (have them listed in host's /etc/fstab). To operate the quotas from i

Re: quotas + jail ?

2006-01-11 Thread Vladimir Dvorak
Björn König wrote: > Vladimir Dvorak schrieb: > >> I have simple question - is possible to use quotas in jail(8) >> environment ? >> [...] >> >> It seems to be impossible ( some kernel restriction ). :-( Is there some >> way to allow this ? My last

Re: quotas + jail ?

2006-01-11 Thread Björn König
Vladimir Dvorak schrieb: I have simple question - is possible to use quotas in jail(8) environment ? [...] It seems to be impossible ( some kernel restriction ). :-( Is there some way to allow this ? My last idea was to replicate users and groups to "main" system and use quotas fro

quotas + jail ?

2006-01-11 Thread Vladimir Dvorak
Hello, I have simple question - is possible to use quotas in jail(8) environment ? I set up my system as follows: 1. this is setting in "main" environment cat /etc/fstab | grep VSERVERS /dev/ad3s1f /VSERVERS ufs rw,noatime,groupquota=/VSERVERS/machine1/quotagroup

Re: Virtual network device for jail...

2006-01-09 Thread Casper
me virtual network device for jail ip aliases? How I understand if I have one network card, I can`t use nat, etc... thnx, Casper ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe

Virtual network device for jail...

2006-01-09 Thread Casper
Hi, Can somebody maybe suggest me how to make some virtual network device for jail ip aliases? How I understand if I have one network card, I can`t use nat, etc... thnx, Casper ___ freebsd-questions@freebsd.org mailing list http

adjkerntz in a jail

2006-01-08 Thread Dave
Hello, I'm running apache in a jail on 6.0. Cron is sending me output like: adjkerntz[33405]: sysctl(put_wallclock): Operation not permitted Is this entry needed in a jail's crontab to run adjkerntz and if so what setting do i have to alter on the host system to make it work? Th

RE: Users unknown in jail, what to do?

2006-01-02 Thread Ruben Bloemgarten
Hi Gabor, I figured as much. A tip: install your "base" tools first, things like freebsd-update, portupgrade, webmin, etc. configure those and then tar the /path/to/jail directory. That will give you a nice clean system to fall back on and replicate whenever you need a new jail, and

RE: Users unknown in jail, what to do?

2005-12-30 Thread Ruben Bloemgarten
Hi Gabor, Did you install the jail following the instructions of the man page ? Which version of FBSD are you running ? Assuming that u are running the jail command from root, you don't have to specify the user. Regards, Ruben -Original Message- From: [EMAIL PROTECTED] [m

Re: Users unknown in jail, what to do?

2005-12-30 Thread Matthew Seaman
Kövesdán Gábor wrote: mtree: line 6: unknown user root *** Error code 1 I copied passwd, master.passwd, group, nsswitch.conf files, too, but I get the same. Could somebody tell me how can I solve this? Try: # pwd_mkdb /etc/master.passwd in your jail. That creates (amongst other things

Users unknown in jail, what to do?

2005-12-30 Thread Kövesdán Gábor
Hello, I've set up a jail and started it with: jail -u root /path/to/jail hostname ip /bin/sh When I tried to install a port inside the jail I got an error message that I don't have the mtree files. I don't know why those files haven't been built but I copied it from th

Re: How much memory is a jail using ... ?

2005-12-30 Thread Pavel Duda
Marc G. Fournier wrote: Is there an easy way to do this? I know I can find out what processes are running in a jail by looking at /proc/*/status ,but none of the fields appear to relate to memory used by that process ... so, I'm guessing I should be able to 'read' one of the

RE: syslog in jail on 6.0

2005-12-30 Thread Ruben Bloemgarten
Hi Dave, Could you send your rc.conf from your mainsystem and jail, syslog.conf from the jail. Also, how did you generate the jail and what is it's purpose ? Regards, Ruben -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dave Sent: December 30,

syslog in jail on 6.0

2005-12-30 Thread Dave
Hello, I've got two jail issues on 6.0. My first problem is when i start the jail via /etc/rc.d/jail start i get this message from the jail startup: syslogd child pid PIDNUM exited with return code 1 and i don't get jail logging. I've got syslog running on the hostsystem and i

How much memory is a jail using ... ?

2005-12-29 Thread Marc G. Fournier
Is there an easy way to do this? I know I can find out what processes are running in a jail by looking at /proc/*/status ,but none of the fields appear to relate to memory used by that process ... so, I'm guessing I should be able to 'read' one of the other fiels in the procfs

Jail and priority

2005-11-15 Thread Vladimir Dvorak
Hello all, simple question: is possible to decrease or increate priority for whole jail without making script which parses all jail processes ? Thank you, Vladimir ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman

Re: Jail cloning problem

2005-11-10 Thread patrick
Whoops, that's something I should have mentioned. :) I'm on FreeBSD 4.11. Patrick On 11/10/05, Kirk Strauser <[EMAIL PROTECTED]> wrote: > On Thursday 10 November 2005 13:01, patrick wrote: > > > I've rebuilt the dev folder using MAKEDEV jail, and have also tried

Re: Jail cloning problem

2005-11-10 Thread patrick
So is it a repairable permissions issue, or is it something that I could never fix? The jail wasn't built on its own filesystem, and because I don't have a spare drive to do that, I'm hoping that there is some way possible to make cloning work using tar. Thanks, Patrick On 11

Re: Jail cloning problem

2005-11-10 Thread Kirk Strauser
On Thursday 10 November 2005 13:01, patrick wrote: > I've rebuilt the dev folder using MAKEDEV jail, and have also tried > ensuring that permissions are correct in /tmp and /var, but to no avail. Which version of FreeBSD? 5.x and onward use devfs and not MAKEDEV; perhaps your d

Re: Jail cloning problem

2005-11-10 Thread Glenn's mailing lists
On Thu, 10 Nov 2005, patrick wrote: I built a jail, and then I tar'd it up after some setup so that I could create new jails quickly. When I start up a cloned jail, everything works except SSH. If I try to ssh outside of the jail, I just get: "Host key verification failed.". I

Jail cloning problem

2005-11-10 Thread patrick
I built a jail, and then I tar'd it up after some setup so that I could create new jails quickly. When I start up a cloned jail, everything works except SSH. If I try to ssh outside of the jail, I just get: "Host key verification failed.". I know from past experience that if I reb

Re: cannot jkill JAIL

2005-11-04 Thread Vladimir Dvorak
Vladimir Dvorak wrote: >Hi, > >cannot jkill jail. > >I have in /etc/rc.conf this: > >jail_enable=yes >jail_list="firma1" >jail_set_hostname_allow="NO" > >jail_firma1_rootdir="/mnt/JAILS/10.0.0.166" >jail_firma1_hostname="co

cannot jkill JAIL

2005-11-04 Thread Vladimir Dvorak
Hi, cannot jkill jail. I have in /etc/rc.conf this: jail_enable=yes jail_list="firma1" jail_set_hostname_allow="NO" jail_firma1_rootdir="/mnt/JAILS/10.0.0.166" jail_firma1_hostname="company1.domain.com" jail_firma1_ip="10.0.0.166" jail_firma1_

Re: Virtual Computer - Jail

2005-10-14 Thread Andrew P.
fecting my regular workstation. Is jail a good sulotion for this? Is > there any other sulotions? > Sincerely > //Niclas > -- > ___ > freebsd-questions@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-quest

Re: Virtual Computer - Jail

2005-10-14 Thread Micah
Niclas Zeising wrote: I was thinking about having some sort of virtual computer or operating system to test stuff in. The point being that i can just to a rm -rf on it and start over if i mess something upp really bad, all without affecting my regular workstation. Is jail a good sulotion for

Re: Virtual Computer - Jail

2005-10-14 Thread Eric Schuele
Niclas Zeising wrote: I was thinking about having some sort of virtual computer or operating system to test stuff in. The point being that i can just to a rm -rf on it and start over if i mess something upp really bad, all without affecting my regular workstation. Is jail a good sulotion for

Virtual Computer - Jail

2005-10-14 Thread Niclas Zeising
I was thinking about having some sort of virtual computer or operating system to test stuff in. The point being that i can just to a rm -rf on it and start over if i mess something upp really bad, all without affecting my regular workstation. Is jail a good sulotion for this? Is there any

Re: problem with ssh connetions in jail

2005-10-04 Thread Tyler T
> hi people first sorry for my english. > > i have a pc with only one etternet card connected to a router > (172.16.0.1) which provide both internet connection and dhcp service, > in this machine i have configured a jail virtual server, the ip of the > real server is 172.16.1.36/

problem with ssh connetions in jail

2005-10-04 Thread Tyler T
hi people first sorry for my english. i have a pc with only one etternet card connected to a router (172.16.0.1) which provide both internet connection and dhcp service, in this machine i have configured a jail virtual server, the ip of the real server is 172.16.1.36/16 and i have made a ip alias

Re: strange routing (?) issues with a jail

2005-09-29 Thread tsuraan
>correctly as well. From outside that machine, I can only connect to > >port 22 on the slave. Attempts to connect to port 80 on the slave > >time out. > > > >The slave is running apache version 1.33+modssl from ports. I have it > >configured with a basic vhosting se

Re: strange routing (?) issues with a jail

2005-09-28 Thread Glenn Dawson
the slave time out. The slave is running apache version 1.33+modssl from ports. I have it configured with a basic vhosting setup, and it seems to work perfectly from within the physical machine the jail is running on. Pf is totally disabled, and it's a fresh install with no strange serv

strange routing (?) issues with a jail

2005-09-28 Thread tsuraan
ing apache version 1.33+modssl from ports. I have it configured with a basic vhosting setup, and it seems to work perfectly from within the physical machine the jail is running on. Pf is totally disabled, and it's a fresh install with no strange services running or unnecessary packages install

Re: Requesting advice on Jail technique.

2005-09-23 Thread Malachi de Ælfweald
I would like to provide as complete of a system as possible to the jail/domain owners What specifically do I need to ensure they DON'T have access to? And if I give them access to the ports collection, how do I prevent them from just installing said binaries anyways? Another thing

Re: Requesting advice on Jail technique.

2005-09-23 Thread sd
Hello, I use different jails for nearly each network service I have to privide: httpd, smtp/pop3, squid, log collector. It's quite difficult to build each particular jail with those programs and corresponding libraries which will be needed in it. That is why I made the following simple s

Re: Requesting advice on Jail technique.

2005-09-22 Thread Chad Leigh -- Shire.Net LLC
On Sep 22, 2005, at 6:51 PM, Malachi de Ælfweald wrote: I am thinking at this point what I am going to try to do is build a jail skeleton, then use unionfs to mount on top of that... so in theory, I could save a LOT of space while at the same time giving them pretty complete jails (one

Re: Requesting advice on Jail technique.

2005-09-22 Thread Malachi de Ælfweald
I am thinking at this point what I am going to try to do is build a jail skeleton, then use unionfs to mount on top of that... so in theory, I could save a LOT of space while at the same time giving them pretty complete jails (one per domain). Malachi On 9/13/05, Frank Mueller - emendis GmbH

Re: sendmail port compilation failed in jail

2005-09-20 Thread Chuck Swiger
Dave wrote: I've cvsupped my ports tree on 5.4-p6 to the latest, and am trying to get sendmail 8.13.5 going in a jail. The compilation appeared to go well, then a test failed. Any suggestions appreciated. Sendmail is failing trying to use SysV shared memory. Try: s

sendmail port compilation failed in jail

2005-09-20 Thread Dave
Hello, I've cvsupped my ports tree on 5.4-p6 to the latest, and am trying to get sendmail 8.13.5 going in a jail. The compilation appeared to go well, then a test failed. Any suggestions appreciated. Thanks. Dave. #make SENDMAIL_WITHOUT_IPV6=yes SENDMAIL_W ITHOUT_NI

Re: ftpd in a jail

2005-09-13 Thread Emanuel Strobl
Am Dienstag, 13. September 2005 12:03 CEST schrieb Dan Toganel: > I have a ftpd server running in a jail and i want to > redirect the ftp traffic from my real host to jail. > I have already configured my traffic from 22 and 25 to > jail with natd and ipfw, but isn't working f

Re: Requesting advice on Jail technique.

2005-09-13 Thread Frank Mueller - emendis GmbH
r all, I will shortly be creating a public service on a private box that will include shell access to untrusted users and would like your opinion on the best way to go about this. Obviously jails are a good start, but my main concern is whether to go for one large jail for all the restr

Re: Requesting advice on Jail technique.

2005-09-13 Thread albi
On Tue, 13 Sep 2005 14:43:00 +0100 Elliot Crosby-McCullough <[EMAIL PROTECTED]> wrote: > Obviously jails are a good start, but my main concern is whether to go > for one large jail for all the restricted users or one small jail per user. -- cut -- > The accounts the

Re: Requesting advice on Jail technique.

2005-09-13 Thread Malachi de Ælfweald
I have been getting ready to do one-jail per domain myself. The key though is that if you want to support any port (and specifically things like ssh) they have to have a public IP address (or 1:1 NAT)... ie: if the ssh server is running under each jail, you need to know my IP address which one

Re: Requesting advice on Jail technique.

2005-09-13 Thread Mike Hernandez
I think one jail for them all would be the only option, think if you have 10+ users that's a lot of copies of binaries and libs. You might want to look into jailkit: http://olivier.sessink.nl/jailkit/howtos_chroot_shell.html I've used it on linux before but never bsd. Good l

Requesting advice on Jail technique.

2005-09-13 Thread Elliot Crosby-McCullough
Dear all, I will shortly be creating a public service on a private box that will include shell access to untrusted users and would like your opinion on the best way to go about this. Obviously jails are a good start, but my main concern is whether to go for one large jail for all the

ftpd in a jail

2005-09-13 Thread Dan Toganel
I have a ftpd server running in a jail and i want to redirect the ftp traffic from my real host to jail. I have already configured my traffic from 22 and 25 to jail with natd and ipfw, but isn't working for ftp. And i set all security.jail.* to 1 , (except security.jail.jailed) How can it be

Re: mDNS inside of a jail or not

2005-08-10 Thread Chad Leigh -- Shire.Net LLC
On Aug 10, 2005, at 3:48 PM, Chad Leigh -- Shire.Net LLC wrote: On an i386 machine with 5.4-R p1 and p6 I want to run some mDNS services inside a jail. I am using testing programs from Apple from <http://developer.apple.com/darwin/ projects/bonjour/> ok, I noticed that there is

mDNS inside of a jail or not

2005-08-10 Thread Chad Leigh -- Shire.Net LLC
On an i386 machine with 5.4-R p1 and p6 I want to run some mDNS services inside a jail. I am using testing programs from Apple from <http://developer.apple.com/darwin/projects/ bonjour/> Inside the jail the various apps that build when you build the Apple project run but they don&

jail question -- why can a user programatically see more than one IP address inside a jail?

2005-08-06 Thread Chad Leigh -- Shire.Net LLC
I have some jails. On 5.3R i386 Some software (some C based, some java) for various reasons, like licensing, look at all the IP addresses/interfaces available in the running system. Inside the jail they return more than just the jails IP address. For example, FrontBase database

syslog in jail

2005-08-03 Thread dave
Hello, I'm trying to set up an ftp server in a jail and it wasn't starting. I've now found out why, but in doing so i've found that syslog isn't logging to the jail, it's logging to the host system's xferlog file, i don't think it should be doing this.

Re: Acess 127.0.0.1 from FreeBSD jail

2005-07-30 Thread Glenn Dawson
At 10:35 PM 7/29/2005, Chad Leigh -- Shire.Net LLC wrote: On Jul 29, 2005, at 11:25 PM, Chatchawan Wongsiriprasert wrote: Hi, I am now using chroot apache+php, and want to move to more secure FreeBSD jail. After read the FreeBSD handbook, I have been successfully created a jailed

Re: Acess 127.0.0.1 from FreeBSD jail

2005-07-29 Thread Chad Leigh -- Shire.Net LLC
On Jul 29, 2005, at 11:25 PM, Chatchawan Wongsiriprasert wrote: Hi, I am now using chroot apache+php, and want to move to more secure FreeBSD jail. After read the FreeBSD handbook, I have been successfully created a jailed apache+php on my test server but there is a litle problem that

Acess 127.0.0.1 from FreeBSD jail

2005-07-29 Thread Chatchawan Wongsiriprasert
Hi, I am now using chroot apache+php, and want to move to more secure FreeBSD jail. After read the FreeBSD handbook, I have been successfully created a jailed apache+php on my test server but there is a litle problem that need to be solved before I put it on my real server. I run mysql

<    5   6   7   8   9   10   11   12   13   14   >