From: Jacques Gelinas (jack_at_solucorp.qc.ca)
Date: Wed 14 Aug 2002 - 05:04:57 BST
On Wed, 14 Aug 2002 11:52:55 -0500, Fran Firman wrote
>
>
> I can ping other machines ok, but the source ip address of the icmp
> connection is coming from the real server, not the ip address of the
> vserver.
>
> This could cause problems later with firewall rules, and routing to the
> end devices.
ping is a special case. The ping utility creates the ping packet itself, bypassing
all vserver security in this area. This is why raw packet are disallowed in vservers
by default.
So do not use ping to test routing with vserver. A vserver is bound to its IP and
as such will use them to talk.
---------------------------------------------------------
Jacques Gelinas <jack_at_solucorp.qc.ca>
vserver: run general purpose virtual servers on one box, full speed!
http://www.solucorp.qc.ca/miscprj/s_context.hc