From owner-freebsd-questions@freebsd.org  Tue Aug 16 15:45:02 2016
Return-Path: <owner-freebsd-questions@freebsd.org>
Delivered-To: freebsd-questions@mailman.ysv.freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org
 [IPv6:2001:1900:2254:206a::19:1])
 by mailman.ysv.freebsd.org (Postfix) with ESMTP id ADAFCBBBF5C;
 Tue, 16 Aug 2016 15:45:02 +0000 (UTC)
 (envelope-from bzeeb-lists@lists.zabbadoz.net)
Received: from mx1.sbone.de (mx1.sbone.de [IPv6:2a01:4f8:130:3ffc::401:25])
 (using TLSv1 with cipher DHE-RSA-CAMELLIA256-SHA (256/256 bits))
 (Client CN "mx1.sbone.de", Issuer "SBone.DE" (not verified))
 by mx1.freebsd.org (Postfix) with ESMTPS id 6FB861213;
 Tue, 16 Aug 2016 15:45:02 +0000 (UTC)
 (envelope-from bzeeb-lists@lists.zabbadoz.net)
Received: from mail.sbone.de (mail.sbone.de [IPv6:fde9:577b:c1a9:31::2013:587])
 (using TLSv1 with cipher ADH-CAMELLIA256-SHA (256/256 bits))
 (No client certificate requested)
 by mx1.sbone.de (Postfix) with ESMTPS id CB38525D3899;
 Tue, 16 Aug 2016 15:44:58 +0000 (UTC)
Received: from content-filter.sbone.de (content-filter.sbone.de
 [IPv6:fde9:577b:c1a9:31::2013:2742])
 (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
 (No client certificate requested)
 by mail.sbone.de (Postfix) with ESMTPS id 045A7D1F8D0;
 Tue, 16 Aug 2016 15:44:58 +0000 (UTC)
X-Virus-Scanned: amavisd-new at sbone.de
Received: from mail.sbone.de ([IPv6:fde9:577b:c1a9:31::2013:587])
 by content-filter.sbone.de (content-filter.sbone.de
 [fde9:577b:c1a9:31::2013:2742]) (amavisd-new, port 10024)
 with ESMTP id 00Uh1rCwQN71; Tue, 16 Aug 2016 15:44:56 +0000 (UTC)
Received: from [10.248.105.13] (fresh-tun0-ula.sbone.de
 [IPv6:fde9:577b:c1a9:4920:2ef0:eeff:fe03:ee34])
 (using TLSv1 with cipher AES256-SHA (256/256 bits))
 (No client certificate requested)
 by mail.sbone.de (Postfix) with ESMTPSA id 401AAD1F8A3;
 Tue, 16 Aug 2016 15:44:56 +0000 (UTC)
From: "Bjoern A. Zeeb" <bzeeb-lists@lists.zabbadoz.net>
To: krad <kraduk@gmail.com>
Cc: "freebsd-jail@freebsd.org" <freebsd-jail@freebsd.org>,
 "Freebsd Questions" <FreeBSD-questions@freebsd.org>
Subject: Re: testing 11.0-RC1 vnet jails with ipfilter
Date: Tue, 16 Aug 2016 15:44:54 +0000
Message-ID: <F610E6D1-6622-4E15-98B4-F7AD58EEA9CF@lists.zabbadoz.net>
In-Reply-To: <CALfReyeR_4pM6FsrFZxTbHNoC1_yd3SZW72Ze9Bo354itzEgWQ@mail.gmail.com>
References: <57B1E1BC.4090205@gmail.com>
 <078403E1-D8A3-4E52-B218-7A8B4400749A@lists.zabbadoz.net>
 <CALfReyeR_4pM6FsrFZxTbHNoC1_yd3SZW72Ze9Bo354itzEgWQ@mail.gmail.com>
MIME-Version: 1.0
Content-Type: text/plain; format=flowed
X-Mailer: MailMate (2.0BETAr6048)
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <https://lists.freebsd.org/mailman/options/freebsd-questions>, 
 <mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions/>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <https://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
 <mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 16 Aug 2016 15:45:02 -0000

On 16 Aug 2016, at 12:47, krad wrote:

> is ipfilter supported in vnet jails? Last time I looked and tried pf 
> didnt
> work (kernel panics), and only ipfw was supported.

In 11-RC* it is present for all 3 firewalls;  like VIMAGE due to memory 
footprint you might have to compile the firewall into the kernel rather 
than kldload it (especially ipfilter).

/bz