Re: VNET jails and PF service

2018-12-13 Thread Kristof Provost
On 2018-12-13 13:06:00 (+0100), Kristof Provost wrote: > On 2018-12-13 12:35:05 (+0100), Goran Mekić wrote: > > On Thu, Dec 13, 2018 at 09:30:12AM +0100, Kristof Provost wrote: > > > On 2018-12-13 01:02:32 (+0100), Goran Mekić wrote: > > > > I can't start PF as service from vnet jail. I have dev

Re: VNET jails and PF service

2018-12-13 Thread Kristof Provost
On 2018-12-13 12:35:05 (+0100), Goran Mekić wrote: > On Thu, Dec 13, 2018 at 09:30:12AM +0100, Kristof Provost wrote: > > On 2018-12-13 01:02:32 (+0100), Goran Mekić wrote: > > > I can't start PF as service from vnet jail. I have devfs rule to unhide > > > bpf (for dhclient) and pf that the jail

Re: VNET jails and PF service

2018-12-13 Thread Goran Mekić
On Thu, Dec 13, 2018 at 01:46:46AM +0100, Miroslav Lachman wrote: > Do you have PF compiled in to your kernel or loaded as module pf.ko in the > host? It's GENERIC, came with 12.0-RELEASE signature.asc Description: PGP signature

Re: VNET jails and PF service

2018-12-13 Thread Goran Mekić
On Thu, Dec 13, 2018 at 09:30:12AM +0100, Kristof Provost wrote: > On 2018-12-13 01:02:32 (+0100), Goran Mekić wrote: > > I can't start PF as service from vnet jail. I have devfs rule to unhide > > bpf (for dhclient) and pf that the jail is using. I can run "pfctl -e -f > > /etc/pf.conf" but "serv

Re: VNET jails and PF service

2018-12-13 Thread Kristof Provost
On 2018-12-13 01:02:32 (+0100), Goran Mekić wrote: > I can't start PF as service from vnet jail. I have devfs rule to unhide > bpf (for dhclient) and pf that the jail is using. I can run "pfctl -e -f > /etc/pf.conf" but "service pf start" fails with: > > kldload: can't load pf: Operation not perm

Re: VNET jails and PF service

2018-12-12 Thread Miroslav Lachman
Goran Mekić wrote on 2018/12/13 01:02: Hello, I can't start PF as service from vnet jail. I have devfs rule to unhide bpf (for dhclient) and pf that the jail is using. I can run "pfctl -e -f /etc/pf.conf" but "service pf start" fails with: kldload: can't load pf: Operation not permitted /etc/rc

VNET jails and PF service

2018-12-12 Thread Goran Mekić
Hello, I can't start PF as service from vnet jail. I have devfs rule to unhide bpf (for dhclient) and pf that the jail is using. I can run "pfctl -e -f /etc/pf.conf" but "service pf start" fails with: kldload: can't load pf: Operation not permitted /etc/rc.d/pf: WARNING: Unable to load kernel mod