DomainKey-Signature: a=rsa-sha1; c=nofws;
        d=gmail.com; s=gamma;
        h=subject:from:to:cc:in-reply-to:references:content-type:date
         :message-id:mime-version:x-mailer:content-transfer-encoding;
        b=VFHF1N9Npl5v8PEcxG5FKwwXenhCBTU0ckOzV78dmzoCUKwnm1p9nwltoIiZhfEYw6
         VLjm8uNyEetA8sQ6rXeaHsjOvGM/J/BYsyMxRg1EP46+7qWMPuPIcYDKKa/UneP/RAWE
         S0Uz9lL0em+C353XWRiY4a6mCjVyVjsWybZ/c=
Subject: Re: [alpine-devel] Vserver
From: Natanael Copa <natanael.copa@gmail.com>
To: Harry Lachanas <grharry@freemail.gr>
Cc: Alpine Developers <alpine-devel@lists.alpinelinux.org>
In-Reply-To: <49AE9C49.90509@freemail.gr>
References: <49AE87B9.2080505@freemail.gr> <1236176949.32434.38.camel@nc>
	 <49AE9C49.90509@freemail.gr>
Content-Type: text/plain
Date: Wed, 04 Mar 2009 16:58:43 +0100
Message-Id: <1236182323.32434.43.camel@nc>
Precedence: list
Mime-Version: 1.0
Content-Transfer-Encoding: 7bit

On Wed, 2009-03-04 at 17:20 +0200, Harry Lachanas wrote:
> Natanael Copa wrote:

...

> however ssh - ing into vserver ( ip 10.128.0.1 ) got me in to the host 
> server ( debian ) ...
> nmap  showed a bunch of ports open ( debian host services  ports ) ....
> 
> 
> What if  dropbear was installed and started in the vserver ???

the host and all vservers must set the listen address for services
rather than bind to */0.0.0.0

This is due to vserver does not virtualize the network stack. the guests
and the host all share the same network stack. benefits: native speed,
low on resources. drawbacks: you must specify bind address.

I think there are a feature that will auto bind 0.0.0.0 to first ip
address of guest or similar, but i didnt turn that one on.

-nc




---
Unsubscribe:  alpine-devel+unsubscribe@lists.alpinelinux.org
Help:         alpine-devel+help@lists.alpinelinux.org
---