Cannot access internet from Jail

[atomicmoose]

Good afternoon,

I recently upgraded from FreeNAS 8.0.3 to FreeNAS-8.3.0-RELEASE-p1-x64 (r12825).

The upgrade itself went fine and I'm learning about the new plugins section.

Here is the issue I am having... I've installed the Jail plugins per the instructions found on the Wiki, and that works fine. However, when I installed SABnzbd and other plugins, they cannot access the outside world. SAB cannot contact my news provider and apps like Maraschino cannot contact their update sites.

I started digging around and did much searching here, and I find that I can connect to the jail fine externally and the jail has no issues seeing the local freeNAS install or even my default gateway, but anything beyond that is no bueno.

Here is an example:

Ping from the FreeNAS box

Code:

[root@MooseNAS] ~# ping 8.8.8.8
PING 8.8.8.8 (8.8.8.8): 56 data bytes
64 bytes from 8.8.8.8: icmp_seq=0 ttl=53 time=16.280 ms
64 bytes from 8.8.8.8: icmp_seq=1 ttl=53 time=14.607 ms
64 bytes from 8.8.8.8: icmp_seq=2 ttl=53 time=15.797 ms
64 bytes from 8.8.8.8: icmp_seq=3 ttl=53 time=16.058 ms

Ping from the same IP, within the Jail

Code:

[root@MooseNAS] ~# jexec 1 ping 8.8.8.8
PING 8.8.8.8 (8.8.8.8): 56 data bytes
^C
--- 8.8.8.8 ping statistics ---
9 packets transmitted, 0 packets received, 100.0% packet loss

I've seen others ask for the following information when troubleshooting, so I'll add it here to save us all some time. :)

Code:

[root@MooseNAS] ~# ifconfig -a
bce0: flags=28943<UP,BROADCAST,RUNNING,PROMISC,SIMPLEX,MULTICAST,PPROMISC> metric 0 mtu 1500
        options=c00b9<RXCSUM,VLAN_MTU,VLAN_HWTAGGING,JUMBO_MTU,VLAN_HWCSUM,VLAN_HWTSO,LINKSTATE>
        ether 00:21:5a:4c:94:9e
        inet 192.168.1.33 netmask 0xffffff00 broadcast 192.168.1.255
        media: Ethernet autoselect (1000baseT <full-duplex,flowcontrol,rxpause,txpause>)
        status: active
lo0: flags=28149<UP,LOOPBACK,RUNNING,PROMISC,MULTICAST,PPROMISC> metric 0 mtu 16384
        options=3<RXCSUM,TXCSUM>
        inet6 fe80::1%lo0 prefixlen 64 scopeid 0x8
        inet6 ::1 prefixlen 128
        inet 127.0.0.1 netmask 0xff000000
        nd6 options=3<PERFORMNUD,ACCEPT_RTADV>
bridge0: flags=28943<UP,BROADCAST,RUNNING,PROMISC,SIMPLEX,MULTICAST,PPROMISC> metric 0 mtu 1500
        ether 02:16:c3:fe:eb:00
        id 00:00:00:00:00:00 priority 32768 hellotime 2 fwddelay 15
        maxage 20 holdcnt 6 proto rstp maxaddr 100 timeout 1200
        root id 00:00:00:00:00:00 priority 32768 ifcost 0 port 0
        member: bce0 flags=143<LEARNING,DISCOVER,AUTOEDGE,AUTOPTP>
                ifmaxaddr 0 port 1 priority 128 path cost 20000
        member: epair0a flags=143<LEARNING,DISCOVER,AUTOEDGE,AUTOPTP>
                ifmaxaddr 0 port 10 priority 128 path cost 2000
epair0a: flags=8943<UP,BROADCAST,RUNNING,PROMISC,SIMPLEX,MULTICAST> metric 0 mtu 1500
        options=8<VLAN_MTU>
        ether 02:4b:1b:00:0a:0a
        media: Ethernet 10Gbase-T (10Gbase-T <full-duplex>)
        status: active

Code:

[root@MooseNAS] ~# netstat -rn
Routing tables

Internet:
Destination        Gateway            Flags    Refs      Use  Netif Expire
default            192.168.1.23       UGS         0      265   bce0
127.0.0.1          link#8             UH          0    46303    lo0
192.168.1.0/24     link#1             U           0    94679   bce0
192.168.1.33       link#1             UHS         0       22    lo0

Internet6:
Destination                       Gateway                       Flags      Netif Expire
::/96                             ::1                           UGRS        lo0
::1                               link#8                        UH          lo0
::ffff:0.0.0.0/96                 ::1                           UGRS        lo0
fe80::%lo0/64                     link#8                        U           lo0
fe80::1%lo0                       link#8                        UHS         lo0
ff01::%lo0/32                     fe80::1%lo0                   U           lo0
ff02::%lo0/32                     fe80::1%lo0                   U           lo0
[root@MooseNAS] ~#

Code:

[root@MooseNAS] ~# jexec 1 ifconfig -a
lo0: flags=28149<UP,LOOPBACK,RUNNING,PROMISC,MULTICAST,PPROMISC> metric 0 mtu 16384
        options=3<RXCSUM,TXCSUM>
        inet 127.0.0.1 netmask 0xff000000
        inet6 ::1 prefixlen 128
        inet6 fe80::1%lo0 prefixlen 64 scopeid 0x1
        nd6 options=3<PERFORMNUD,ACCEPT_RTADV>
epair0b: flags=28943<UP,BROADCAST,RUNNING,PROMISC,SIMPLEX,MULTICAST,PPROMISC> metric 0 mtu 1500
        options=8<VLAN_MTU>
        ether 02:4b:1b:00:0b:0b
        inet 192.168.1.32 netmask 0xffffff00 broadcast 192.168.1.255
        inet6 fe80::4b:1bff:fe00:b0b%epair0b prefixlen 64 scopeid 0x2
        nd6 options=3<PERFORMNUD,ACCEPT_RTADV>
        media: Ethernet 10Gbase-T (10Gbase-T <full-duplex>)
        status: active
[root@MooseNAS] ~#

I'm stumped and could really use your help. Thank you in advance!

Moose

 

[atomicmoose]

Does anyone have any suggestions?

 

[atomicmoose]

Bump - could really use some help on this! :)

 

[atomicmoose]

Anyone? Trying this an a fresh install and still having an issue.

 

[lorenzoASR]

Hello,

i'm have the SAME problem, you can read infos there -> http://forums.freenas.org/threads/jail-network-problem-no-communication-with-gateway.13847/

Just tell me a thing, are you using DHCP to configure network on FreeNas side? In my case the problem seems to be solved using DHCP!

 

[atomicmoose]

I was using DHCP, yes. I was never able to figure this problem out and abandoned FreeNAS altogether.