From owner-freebsd-net@FreeBSD.ORG  Fri Aug 26 10:33:13 2005
Return-Path: <owner-freebsd-net@FreeBSD.ORG>
X-Original-To: freebsd-net@FreeBSD.org
Delivered-To: freebsd-net@FreeBSD.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id CCEF816A41F;
	Fri, 26 Aug 2005 10:33:13 +0000 (GMT) (envelope-from anders@fupp.net)
Received: from totem.fix.no (totem.fix.no [80.91.36.20])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 6B3C743D48;
	Fri, 26 Aug 2005 10:33:13 +0000 (GMT) (envelope-from anders@fupp.net)
Received: from localhost (totem.fix.no [80.91.36.20])
	by totem.fix.no (Postfix) with ESMTP id 1A46F5F3823;
	Fri, 26 Aug 2005 12:33:11 +0200 (CEST)
Received: from totem.fix.no ([80.91.36.20])
	by localhost (totem.fix.no [80.91.36.20]) (amavisd-new,
	port 10024) with LMTP
	id 94125-02; Fri, 26 Aug 2005 12:33:10 +0200 (CEST)
Received: by totem.fix.no (Postfix, from userid 1000)
	id 88CD25F380D; Fri, 26 Aug 2005 12:33:10 +0200 (CEST)
Date: Fri, 26 Aug 2005 12:33:10 +0200
From: Anders Nordby <anders@fupp.net>
To: freebsd-net@FreeBSD.org, freebsd-security@FreeBSD.org
Message-ID: <20050826103310.GA94494@totem.fix.no>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
X-PGP-Key: http://anders.fix.no/pgp/
X-PGP-Key-FingerPrint: 1E0F C53C D8DF 6A8F EAAD  19C5 D12A BC9F 0083 5956
User-Agent: Mutt/1.5.6i
Cc: 
Subject: Filtering jail IP traffic
X-BeenThere: freebsd-net@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: Networking and TCP/IP with FreeBSD <freebsd-net.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-net>,
	<mailto:freebsd-net-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-net>
List-Post: <mailto:freebsd-net@freebsd.org>
List-Help: <mailto:freebsd-net-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-net>,
	<mailto:freebsd-net-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Fri, 26 Aug 2005 10:33:13 -0000

Hi,

IP traffic from one jail to another jail, arrives on destination jail on
lo0 having the destination jails IP as source IP. Why not the source
jail's IP address?

How can I filter traffic from one jail to another, using ipfw of ipf?

Cheers,

-- 
Anders.