Date: Tue, 3 May 2016 20:55:43 -0600 From: Alan Somers <asomers@freebsd.org> To: FreeBSD Net <freebsd-net@freebsd.org> Subject: How to use pf with vimage jails? Message-ID: <CAOtMX2jtxjUxiOv_LqO8Gg5AhXrSBb%2BWatCktx7y03w=st=w3w@mail.gmail.com>
next in thread | raw e-mail | index | archive | help
Is there any documentation on how to run pf on a host, using it to control access to vimage jails? I see that only ipfw can be run from _inside_ of the jail, but I'm interested in running pf _outside_ of the jail. One example application would be to use a jail as a honeypot. In that case, you wouldn't trust the jail to control its own firewall. Another would be to use jails as a poor man's DMZ. -Alan
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?CAOtMX2jtxjUxiOv_LqO8Gg5AhXrSBb%2BWatCktx7y03w=st=w3w>