Andy22 wrote:
So u can start the Jail?
How do u test internet connectivity of the Jail?
In the host machine u basically use the commands "jls" to list all jails, "jexec {jailnumber} csh" to start a shell inside the jail.
Inside the jail u can try "pkg update" and see if u get a connection, also check if "resolve.conf" inside the jail has valid dns entries.
Here are some outputs u can post so we can try understand whats wrong. (remove the loopback and ipfw adapters)
on the host machine with a jail started: "jls", "ifconfig", "ipfw list"
inside the jail "ifconfig", "pkg update", "whois google.com".
bye
Andy
PS: The "raw sockets" are only needed to use ping/tracert, so u might get a outside connection even without those enabled. The concept is u "allow" them by "security.jail.allow_raw_sockets=1" in the sysctl.conf and actually "activate" them per jail via "allow.raw_sockets=1" in the "Addition Parameters" field for the jail.
hi Andy
This is what is inside /etc/resolv.conf - the same on the host and the jail
domain local
nameserver 192.168.0.1
192.168.0.1 is the IP of my router - the gateway, and in there i have the DNS (primary and secondary) defined as defined by my ISP.
Here are the outputs i get.
On the host, jail started"
nas4free: etc # jls
JID IP Address Hostname Path
5 192.168.0.61 Plex.local /mnt/Viking/Twin/Jails/Plex
nas4free: etc # ifconfig
em0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500
options=4219b<RXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING,VLAN_HWCSUM,TSO4,WOL_MAGIC,VLAN_HWTSO>
ether 00:16:76:20

27
inet 192.168.0.60 netmask 0xffffff00 broadcast 192.168.0.255
inet 192.168.0.61 netmask 0xffffffff broadcast 192.168.0.61
nd6 options=29<PERFORMNUD,IFDISABLED,AUTO_LINKLOCAL>
media: Ethernet autoselect (100baseTX <full-duplex>)
status: active
plip0: flags=8810<POINTOPOINT,SIMPLEX,MULTICAST> metric 0 mtu 1500
nd6 options=29<PERFORMNUD,IFDISABLED,AUTO_LINKLOCAL>
ipfw0: flags=8801<UP,SIMPLEX,MULTICAST> metric 0 mtu 65536
nd6 options=29<PERFORMNUD,IFDISABLED,AUTO_LINKLOCAL>
lo0: flags=8049<UP,LOOPBACK,RUNNING,MULTICAST> metric 0 mtu 16384
options=600003<RXCSUM,TXCSUM,RXCSUM_IPV6,TXCSUM_IPV6>
inet6 ::1 prefixlen 128
inet6 fe80::1%lo0 prefixlen 64 scopeid 0x9
inet 127.0.0.1 netmask 0xff000000
nd6 options=21<PERFORMNUD,AUTO_LINKLOCAL>
nas4free: etc # ipfw list
65535 allow ip from any to any
nas4free: etc # ping www.google.com
PING
www.google.com (173.194.34.147): 56 data bytes
64 bytes from 173.194.34.147: icmp_seq=0 ttl=52 time=162.982 ms
64 bytes from 173.194.34.147: icmp_seq=1 ttl=52 time=163.300 ms
64 bytes from 173.194.34.147: icmp_seq=2 ttl=52 time=162.164 ms
64 bytes from 173.194.34.147: icmp_seq=3 ttl=52 time=162.885 ms
64 bytes from 173.194.34.147: icmp_seq=4 ttl=52 time=163.251 ms
64 bytes from 173.194.34.147: icmp_seq=5 ttl=52 time=163.425 ms
64 bytes from 173.194.34.147: icmp_seq=6 ttl=52 time=163.038 ms
64 bytes from 173.194.34.147: icmp_seq=7 ttl=52 time=163.254 ms
64 bytes from 173.194.34.147: icmp_seq=8 ttl=52 time=164.309 ms
64 bytes from 173.194.34.147: icmp_seq=9 ttl=52 time=164.086 ms
^C
---
www.google.com ping statistics ---
10 packets transmitted, 10 packets received, 0.0% packet loss
round-trip min/avg/max/stddev = 162.164/163.269/164.309/0.573 ms
****INSIDE THE JAIL
root@Plex:/ # ifconfig
em0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500
options=4219b<RXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING,VLAN_HWCSUM,TSO4,WOL_MAGIC,VLAN_HWTSO>
ether 00:16:76:20

27
inet 192.168.0.61 netmask 0xffffffff broadcast 192.168.0.61
media: Ethernet autoselect (100baseTX <full-duplex>)
status: active
plip0: flags=8810<POINTOPOINT,SIMPLEX,MULTICAST> metric 0 mtu 1500
ipfw0: flags=8801<UP,SIMPLEX,MULTICAST> metric 0 mtu 65536
lo0: flags=8049<UP,LOOPBACK,RUNNING,MULTICAST> metric 0 mtu 16384
options=600003<RXCSUM,TXCSUM,RXCSUM_IPV6,TXCSUM_IPV6>
root@Plex:/ # pkg update
The package management tool is not yet installed on your system.
Do you want to fetch and install it now? [y/N]: y
Bootstrapping pkg please wait
_http._tcp.pkg.FreeBSD.org
pkg: Error fetching
http://pkg.FreeBSD.org/freebsd:9:x86:64 ... st/pkg.txz: No address record
root@Plex:/ # whois http://www.google.com
whois: com.whois-servers.net: hostname nor servname provided, or not known