看板FB_security
标 题Re: [patch] Raw sockets in jails
发信站NCTU CSIE FreeBSD Server (Thu Apr 22 11:10:16 2004)
转信站ptt!FreeBSD.csie.NCTU!not-for-mail
--5mjPmdht4ZehXHR2
Content-Type: text/plain; charset=iso-8859-2
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
On Tue, Apr 20, 2004 at 08:00:27PM +0000, Christian S.J. Peron wrote:
+> Poul/group
+>=20
+> The following patch makes raw sockets comply with prison IP addresses.
+> Some tools such as traceroute(8) may require that the prison IP address
+> be specified on the command line. I.E.
+>=20
+> traceroute -s <prison ip> <dest address>
+>=20
+> Otherwise it might fail.
+>=20
+> (because of this we may want to get rid of the
+> create_raw_sockets MIB all together).
+>=20
+> Anyway, take a gander at it (testers feedback welcome):
Looks very neat! I've merge your patch to my jail work (pjd_jail perforce
branch) and changed it to be usable with my multiple ips stuff.
I haven't reviewed nor tested it yet.
--=20
Pawel Jakub Dawidek
http://www.FreeBSD.org
[email protected] http://garage.freebsd.pl
FreeBSD committer Am I Evil? Yes, I Am!
--5mjPmdht4ZehXHR2
Content-Type: application/pgp-signature
Content-Disposition: inline
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (FreeBSD)
iD8DBQFAh6y6ForvXbEpPzQRArWBAKDKijJxa0MWetxMmwtuKgYgFYv6WQCgpL/W
on2HykuapcHLa7EGsAhkxNM=
=QbHT
-----END PGP SIGNATURE-----
--5mjPmdht4ZehXHR2--