https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=259149
Thomas Hurst <t...@hur.st> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |t...@hur.st --- Comment #3 from Thomas Hurst <t...@hur.st> --- Investigating this finds 'net.inet.ip.portrange.reservedhigh=1023' within a vnet jail, so mac_portacl doesn't get a chance to do anything. As on the host this needs to be set to 0 to allow mac_portacl to operate, though to change this I had to drop the initial jail securelevel. -- You are receiving this mail because: You are the assignee for the bug.