Page 1 of 1

Jail Internet Connectivity Behind VPN

Posted: 21 Dec 2013 00:12
by jay610
NAS4Free 9.0.0.1 (revision 249) x64-full
INTEL MOPNV10N Intel(R) Atom(TM) CPU D510 @ 1.66GHz 4864MiB RAM

bus=1 hubaddr=2 port=4 devaddr=2 interface=0 PLIP network interface
RTL8169S/8110S/8211 1000BASE-T media interface Intel 82801GB/R (ICH7)
USB 2.0 controller Intel 82801G (ICH7) USB controller USB-A Intel
82801G (ICH7) USB controller USB-B Intel 82801G (ICH7) USB controller
USB-C Intel 82801G (ICH7) USB controller USB-D
Description:
Hi.

I've now got everything setup with a wiki-created jail (no brig for me because
legacy version) and installs of the usual python friends CP, SB, Sabz, etc. I
also have OpenVPN running on my host machine at boot.

HOWEVER.

The jail has no internet connectivity when the VPN is on. It works fine when the VPN is killed, but I'd kind of like to have the VPN on :).

I've seen the question posed around the forum before but not clearly answered. I have a feeling TheBrig allows for a ticked box to solve this, but I had to use
the wiki to create my jail so I am lost here.

Surely this is not so difficult to sort out?

Re: Jail Internet Connectivity Behind VPN

Posted: 21 Dec 2013 12:22
by chrisf4lc0n
Sorry I cannot help here, never worked with Jails, as I do not see the point of creating a Jail for the openVPN.

Re: Jail Internet Connectivity Behind VPN

Posted: 23 Dec 2013 08:35
by alexey123
jay610 wrote: Description:
Hi.

I've now got everything setup with a wiki-created jail (no brig for me because
legacy version) and installs of the usual python friends CP, SB, Sabz, etc. I
also have OpenVPN running on my host machine at boot.

HOWEVER.

The jail has no internet connectivity when the VPN is on. It works fine when the VPN is killed, but I'd kind of like to have the VPN on :).

I've seen the question posed around the forum before but not clearly answered. I have a feeling TheBrig allows for a ticked box to solve this, but I had to use
the wiki to create my jail so I am lost here.

Surely this is not so difficult to sort out?
TheBrig use /etc/rc.d/jail file for create and start jails. It way was simple for make TheBrig compatible to wiki style
But this way have many minors.
1. Jail root user connot mount jail-friendly filesystems.
2. Currently jail user cannot mount zfs volumes
3. VPN not work properly under jail.
I work on this issues

Re: Jail Internet Connectivity Behind VPN

Posted: 23 Dec 2013 09:39
by jay610
Thanks for the explanation. I have found some topics around the BSD forums from people getting this to work and have tried some stuff that didn't work.

It's above my level so I will work around it until someone more skilled than me figures it out.


Cheers alexey

Re: Jail Internet Connectivity Behind VPN

Posted: 07 Jan 2014 20:00
by joed
Hi,

I have the same problem, when OpenVPN is running on the host i get no connection to internet on my jail. But when my VPN is down it's all working smoothly. But of course, I'd rather have my vpn-connection up.

Have you found a solution @jay610?

// Joe

Re: Jail Internet Connectivity Behind VPN

Posted: 20 Jan 2014 01:58
by jay610
Hi Joe

I punted. I found some suggestions on the FreeBSD forums as well as some general advice elsewhere on the net about ARP tables, but never could get it going. Time is scarce for me these days so I just had to forget about it unless someone else can post a solution here.