Re: bind() on 127.0.0.1 in jail: bound to the outside address?

看板FB_security作者時間20年前 (2005/07/04 19:17), 編輯推噓0(000)
留言0則, 0人參與, 最新討論串2/2 (看更多)
Hello, in Jails you cannot bound any application to the 127.0.0.1, you ccan always bound only to the jail-ip. If you setup sshd in jail (or an other way to get a shell in this jail) so= =20 you can make the ifconfig -a so that you can see you have only the outbound address 192.168.1.1 ( the jail-ip) to bind services to that address. jou can not have more then one 127.0.0.1, because this address is viewable in the Host enviroment, but you can try to setting up 127.0.0.2 as second ipdadress of the lo-device and get these the jail, but you loose then the other ip ( i think, be not s= ure). try to set the second ip-address in rc.conf of the jail. best regards michael _______________________________________________ freebsd-security@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-security To unsubscribe, send any mail to "freebsd-security-unsubscribe@freebsd.org"
文章代碼(AID): #12oHh400 (FB_security)
文章代碼(AID): #12oHh400 (FB_security)