Assigning IP to virtual network interface under chroot() jail.

Hi,

My server comes with 5 IPs, and I want to use one of these IPs inside a
chroot() jail. Actually, I'll be very happy if the system "behind" the
chroot() jail won't know about the existance of this IP address.

The purpose of all of this is to run 2 identical services (e.g. 2
APACHEs, 2 SSHDs, etc..) on the same port, on different IPs, but on the
same server. One will run from inside the chroot() jail, and the other
one will run from an other chroot() jail, or maybe from the main
server.

Is there any possible way of doing that?


I'm running Debian Sarge using a 2.6 686 kernel.

Thanks a lot!


Ofer Shaked.

<(E-Mail Removed)> wrote in message
news:(E-Mail Removed) oups.com

> My server comes with 5 IPs, and I want to use one of these IPs inside
> a chroot() jail. Actually, I'll be very happy if the system "behind"
> the chroot() jail won't know about the existance of this IP address.
>
> The purpose of all of this is to run 2 identical services (e.g. 2
> APACHEs, 2 SSHDs, etc..) on the same port, on different IPs, but on
> the same server. One will run from inside the chroot() jail, and the
> other one will run from an other chroot() jail, or maybe from the main
> server.
>
> Is there any possible way of doing that?

I believe that the chroot() concept pertains to filesystem access, not
interface access.

ynotssor wrote:
> I believe that the chroot() concept pertains to filesystem access, not
> interface access.

So I guess I will have to use programs which makes it possible for me
to choose which network interface I want to use. Is that the best
solution?

And thanks for your answer.

(E-Mail Removed) wrote:

> So I guess I will have to use programs which makes it possible for me
> to choose which network interface I want to use. Is that the best
> solution?

*Any* decent network service allows you to choose this.

You haven't said anything about what services you mean, when that might
simplify matters *so* much.

J