Re: Jails and IPFW

2009-12-14 Thread Matthew Seaman
Jack Raats wrote: Hi, I'm looking for a good manual how to implement ipfw in and with jails. Google doesn't give anything usefull Thanks for your time By default, the only way you can implement firewalling (either ipfw, ipf or pf) is within the host system -- it simply has not been possible t

Re: Jails and IPFW

2009-12-14 Thread Paul Procacci
run on the host machine like: $IPF 6000 pass tcp from any to $jail1 22,80 in $IPF 6000 pass tcp from any to $jail2 22,80 in Jack - Original Message - From: "Paul Procacci" To: "Jack Raats" Cc: Sent: Monday, December 14, 2009 6:33 AM Subject: Re: Jails and IPFW If

Re: Jails and IPFW

2009-12-13 Thread Jack Raats
pass tcp from any to $jail2 22,80 in Jack - Original Message - From: "Paul Procacci" To: "Jack Raats" Cc: Sent: Monday, December 14, 2009 6:33 AM Subject: Re: Jails and IPFW If you are asking whether the root user of the jail can implement their own firewall, the

Re: Jails and IPFW

2009-12-13 Thread Paul Procacci
If you are asking whether the root user of the jail can implement their own firewall, then no that is not possible. If you are asking whether you can use ipfw along side jails, then yes you can. The administration of said firewall doesn't change one bit due to the introduction of a jail. So, if i