From: Patrick LeBoutillier (patrick_leboutillier_at_hotmail.com)
Date: Thu 27 Dec 2001 - 02:21:12 GMT
John,
I think this is due to the fact that the vservers, by default, are started
with limited capabilities. This means that even if you are
root there are certain things that you can't do within a vserver.
The ping command requires a capability that is removed by default
(something to do with opening raw sockets). I think the "vserver" command
has some options to define which capabilities are removed/given from the
vserver when you start it.
Cheers,
Patrick
>From: "John Lyons" <support_at_nsnoc.com>
>Reply-To: <support_at_nsnoc.com>
>To: <vserver_at_solucorp.qc.ca>
>Subject: Network access from within a vserver
>Date: Wed, 26 Dec 2001 02:13:22 -0000
>
>
>I've overcome my previous probs and patched and recompiled a new kernel.
>Got
>it all up and running and the vservers running.
>
>Problem I've got now is from within a vserver
>
>sh-2.05# ping 192.168.0.11
>ping: icmp open socket: Operation not permitted
>
>ifconfig on the host server shows.
>
>eth0:1:v1 Link encap:Ethernet HWaddr 00:E0:18:46:04:21
> inet addr:192.168.0.11 Bcast:192.168.0.255 Mask:255.255.255.0
> UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
> Interrupt:10 Base address:0xd400
>
>Am I missing a service setup within the vserver?
>
>
>Regards
>
>John Lyons
>DomainCity
>http://www.domaincity.co.uk
>support_at_domaincity.co.uk
>ICQ 74187012
>
>***********************************************************************
>Please quote your account number in the subject line of all emails.
>Failure to do so may result in your enquiries taking longer to process.
>***********************************************************************
>
----------------------------------
| Patrick LeBoutillier
| patrick_leboutillier_at_hotmail.com
_________________________________________________________________
Join the world’s largest e-mail service with MSN Hotmail.
http://www.hotmail.com