Re: VNET jails and PF service

2018-12-13 Thread Kristof Provost
On 2018-12-13 13:06:00 (+0100), Kristof Provost wrote: > On 2018-12-13 12:35:05 (+0100), Goran Mekić wrote: > > On Thu, Dec 13, 2018 at 09:30:12AM +0100, Kristof Provost wrote: > > > On 2018-12-13 01:02:32 (+0100), Goran Mekić wrote: > > > > I can't start PF as service from vnet jail. I have dev

Re: VNET jails and PF service

2018-12-13 Thread Kristof Provost
On 2018-12-13 12:35:05 (+0100), Goran Mekić wrote: > On Thu, Dec 13, 2018 at 09:30:12AM +0100, Kristof Provost wrote: > > On 2018-12-13 01:02:32 (+0100), Goran Mekić wrote: > > > I can't start PF as service from vnet jail. I have devfs rule to unhide > > > bpf (for dhclient) and pf that the jail

Re: VNET jails and PF service

2018-12-13 Thread Goran Mekić
On Thu, Dec 13, 2018 at 01:46:46AM +0100, Miroslav Lachman wrote: > Do you have PF compiled in to your kernel or loaded as module pf.ko in the > host? It's GENERIC, came with 12.0-RELEASE signature.asc Description: PGP signature

Re: VNET jails and PF service

2018-12-13 Thread Goran Mekić
On Thu, Dec 13, 2018 at 09:30:12AM +0100, Kristof Provost wrote: > On 2018-12-13 01:02:32 (+0100), Goran Mekić wrote: > > I can't start PF as service from vnet jail. I have devfs rule to unhide > > bpf (for dhclient) and pf that the jail is using. I can run "pfctl -e -f > > /etc/pf.conf" but "serv

Re: VNET jails and PF service

2018-12-13 Thread Kristof Provost
On 2018-12-13 01:02:32 (+0100), Goran Mekić wrote: > I can't start PF as service from vnet jail. I have devfs rule to unhide > bpf (for dhclient) and pf that the jail is using. I can run "pfctl -e -f > /etc/pf.conf" but "service pf start" fails with: > > kldload: can't load pf: Operation not perm