Re: Using OpenBSD guest as PF firewall

2020-11-06 Thread Thomas Laus
On 11/5/20 9:24 PM, Jason Tubnor wrote: > > You could create a clone (lo) with an IP address, add that as an > interface to a vm switch and then guest tap to that vm switch? >I ended up getting this all to function by removing bridge 'public' created by the vm-bhyve utility and manually making the

Re: Using OpenBSD guest as PF firewall

2020-11-05 Thread Jason Tubnor
On Fri, 6 Nov 2020 at 12:29, Thomas Laus wrote: > > bridge function that is not working like the Forum article. The 'vm > switch tap' creation gives me access to the OpenBSD guest, but I still > can't pass internet traffic from the FreeBSD host through the guest > OpenBSD PF and then onto the in

Re: Using OpenBSD guest as PF firewall

2020-11-05 Thread Thomas Laus
Jason Tubnor [ja...@tubnor.net] wrote: > On Thu, 5 Nov 2020 at 23:40, Thomas Laus wrote: > > Review the vm-bhyve man page. You just need to add an option to > {guest}.conf file that references the device you are passing through. The > section you are looking for is passthruX > > passthru0=Base

Re: Using OpenBSD guest as PF firewall

2020-11-05 Thread Jason Tubnor
On Thu, 5 Nov 2020 at 23:40, Thomas Laus wrote: > > My question to this list was how this can be done using vm-bhyve > commands. This 'how-to' showed the traditional scripting method and I > would prefer using the 'vm' commands. The tap0 created as part of the > 'vm switch' utility, is able to

Re: Using OpenBSD guest as PF firewall

2020-11-05 Thread Thomas Laus
On 11/4/20 4:40 PM, Mateusz Piotrowski wrote: > > Just for the record, the pf version currently available in FreeBSD is > not just an old OpenBSD pf. See the note in the PF chapter in the > handbook (https://www.freebsd.org/doc/handbook/firewalls-pf.html): > > "Warning: > > When reading the PF F

Re: Using OpenBSD guest as PF firewall

2020-11-05 Thread Thomas Laus
On 11/4/20 4:52 PM, Jason Tubnor wrote: > > I think you are getting a few things mixed up here.  If you pass through > the adaptor to OpenBSD, then you'll address it by the real device name > and not use the vio driver.  Once you pass it through, the host will not > be able to communicate with the

Re: Using OpenBSD guest as PF firewall

2020-11-04 Thread Jason Tubnor
On Thu, 5 Nov 2020 at 03:32, Thomas Laus wrote: > Is there a How-To or a Handbook article for using an OpenBSD guest as a > firewall for a FreeBSD host? I have enabled pci-passthru and the > OpenBSD guest can use the functional FreeBSD NIC hardware and has a > hostname.vio0 configured with an IP

Re: Using OpenBSD guest as PF firewall

2020-11-04 Thread Mateusz Piotrowski
On 11/4/20 8:49 PM, Paul Pathiakis via freebsd-virtualization wrote: Thank you. I didn't know they had never 're-synced'. Paul Just for the record, the pf version currently available in FreeBSD is not just an old OpenBSD pf. See the note in the PF chapter in the handbook (https://www.freebsd

Re: Using OpenBSD guest as PF firewall

2020-11-04 Thread Paul Pathiakis via freebsd-virtualization
Thank you. I didn't know they had never 're-synced'. Paul On Wednesday, November 4, 2020, 2:48:20 PM EST, Thomas Laus wrote: Paul Pathiakis [pathia...@yahoo.com] wrote: >  Hi, > Is there a reason you would want to use OpenBSD versus FreeBSD? > FreeBSD has pf and I use it on my server a

Re: Using OpenBSD guest as PF firewall

2020-11-04 Thread Thomas Laus
Paul Pathiakis [pathia...@yahoo.com] wrote: > Hi, > Is there a reason you would want to use OpenBSD versus FreeBSD? > FreeBSD has pf and I use it on my server at home. > > Are you exploring OpenBSD? Did you not know that pf is an > available firewall on FreeBSD? > The OpenBSD PF firewall is sever

Re: Using OpenBSD guest as PF firewall

2020-11-04 Thread Paul Pathiakis via freebsd-virtualization
Hi, Is there a reason you would want to use OpenBSD versus FreeBSD?  FreeBSD has pf and I use it on my server at home.  Are you exploring OpenBSD?  Did you not know that pf is an available firewall on FreeBSD? Paul On Wednesday, November 4, 2020, 11:32:33 AM EST, Thomas Laus wrote:

Using OpenBSD guest as PF firewall

2020-11-04 Thread Thomas Laus
Is there a How-To or a Handbook article for using an OpenBSD guest as a firewall for a FreeBSD host? I have enabled pci-passthru and the OpenBSD guest can use the functional FreeBSD NIC hardware and has a hostname.vio0 configured with an IP address and netmask. I have created a public switch on t