Using one IP for both TrueNas and Jail with NAT Port Forwarding

[Aurelio]

Hi,

I changed the Port of my trueNas WebGui to 8080/8443 like this:

This also works and can be confirmed in the open ports when checking the System directly:

Code:

% sockstat -l4
USER     COMMAND    PID   FD PROTO  LOCAL ADDRESS         FOREIGN ADDRESS
avahi    avahi-daem 18542 13 udp4   *:5353                *:*
avahi    avahi-daem 18542 15 udp4   *:18863               *:*
www      nginx      15507 6  tcp4   *:8443                *:*
www      nginx      15507 8  tcp4   *:8080                *:*
root     nginx      15506 6  tcp4   *:8443                *:*
root     nginx      15506 8  tcp4   *:8080                *:*
root     python3.9  1933  9  udp4   239.255.255.250:3702  *:*
root     python3.9  1933  10 udp4   *:60608               *:*
root     python3.9  1933  11 udp4   192.168.1.19:3702     *:*
root     python3.9  1933  12 tcp4   192.168.1.19:5357     *:*
root     sshd       1377  4  tcp4   *:22                  *:*
ntpd     ntpd       1340  21 udp4   *:123                 *:*
ntpd     ntpd       1340  23 udp4   192.168.1.19:123      *:*
ntpd     ntpd       1340  27 udp4   127.0.0.1:123         *:*
root     syslog-ng  1274  19 udp4   127.0.0.1:1031        *:*
root     python3.9  257   29 tcp4   *:6000                *:*

So Port 80 and 443 are free technically speaking.

When I go to my single jail (no other ones configured) and change the Network to NAT and enable port forwarding like this tough:

I get an Error when starting the Jail: that doesn't make any sense:

Anyone got an idea why its complaining about another running jail?
When checking over console I legit have no other running jail. (not that I have any other ones setup)

Code:

~ % sudo iocage list
+------+-----------+-------+--------------+------------+
| JID  |   NAME    | STATE |   RELEASE    |    IP4     |
+======+===========+=======+==============+============+
| None | NextCloud | down  | 13.1-RELEASE | 172.16.0.2 |
+------+-----------+-------+--------------+------------+

Any help greatly appreciated! And I really don't want to run it on another IP. I want one single IP and domain/FQDN for both TrueNas WebGui and the Jail.

 

[Davvo]

iirc running both the jail and the nas on the same ip is a bad idea, but networking is really not in my scope of knowledge.

 

[ddaenen1]

iirc running both the jail and the nas on the same ip is a bad idea, but networking is really not in my scope of knowledge.

I agree. I don't understand why people do this when it is so easy to get a dedicated IP for each jail. I cannot figure out one reason why you would want to do that.