Re: ifconfig: BRDGADD lo1: invalid argument

2016-06-26 Thread Alan Somers
On Sun, Jun 26, 2016 at 3:37 AM, wrote: > Hello. > > On 2016-06-25T18:13:18 -0600 > Alan Somers wrote: > >> On Sat, Jun 25, 2016 at 4:05 PM, wrote: >> > I'm not using vnet jails. I'm actually just trying to get filtering of >> > outbound traffic (see the other mail I sent to this list a few se

Re: Filtering outbound traffic for private address jails?

2016-06-26 Thread Aleksandr A Babaylov
On Sat, Jun 25, 2016 at 10:01:37PM +, org.freebsd.secur...@io7m.com wrote: > Hello. > > I have been searching for the best part of a day for a solution to this > problem and quite frankly cannot believe that I've spent this long on > something that appears to be so simple and that used to be f

Re: Filtering outbound traffic for private address jails?

2016-06-26 Thread James Lodge
>'Lo. >On 2016-06-26T02:32:04 + >James Lodge wrote: > > If you clone lo1, give it a 192.168.x.x/32 IP and then use the following > pf.conf > Do you need to bridge the interfaces? You may need to add > gateway_enable="YES" to rc.conf > > Not sure if that's what you're trying to do? > > Jame

Re: Filtering outbound traffic for private address jails?

2016-06-26 Thread org.freebsd.security
'Lo. On 2016-06-26T02:32:04 + James Lodge wrote: > > If you clone lo1, give it a 192.168.x.x/32 IP and then use the following > pf.conf > Do you need to bridge the interfaces? You may need to add > gateway_enable="YES" to rc.conf > > Not sure if that's what you're trying to do? > > James

Re: Filtering outbound traffic for private address jails?

2016-06-26 Thread org.freebsd.security
Hello. On 2016-06-25T17:17:53 -0600 Alan Somers wrote: > > I'm filtering outbound traffic, but I'm not using NAT on the jail > host. Instead, I have a dedicated router doing NAT, and my jail host > has multiple IP addresses. At first I tried using traditional > shared-address jails, but the fi

Re: ifconfig: BRDGADD lo1: invalid argument

2016-06-26 Thread org.freebsd.security
Hello. On 2016-06-25T18:13:18 -0600 Alan Somers wrote: > On Sat, Jun 25, 2016 at 4:05 PM, wrote: > > I'm not using vnet jails. I'm actually just trying to get filtering of > > outbound traffic (see the other mail I sent to this list a few seconds > > before you responded). > > Based on my e