From: Darryl Ross (bofh_at_afoyi.com)
Date: Thu 11 Mar 2004 - 13:16:31 GMT
Dariush Pietrzak wrote:
>>services in the host to ONLY bind the host's IP address, instead of all
> Not true.
> The whole point of vservers networking is that you can give some ip to thw
> whole server, and then when services inside bind to '0.0.0.0' they get anlo
> what was allocated for given vserver.
> If what you say was true, there wouldn't be much difference between
> vserver setup and chrooted services.
Did you read what he said??
As per your quote above, emphasis is mine:
> services in the __host__ to ONLY bind the __host's__ IP address
which is exactly what you want to do. If you need to run a service in
the host, as well as inside the vservers (eg, ssh), you need to tell the
host sshd to only bind to the main IP, not the IP addresses of all the
Vserver mailing list