From owner-freebsd-questions@freebsd.org  Tue Aug 23 17:24:58 2016
Return-Path: <owner-freebsd-questions@freebsd.org>
Delivered-To: freebsd-questions@mailman.ysv.freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org
 [IPv6:2001:1900:2254:206a::19:1])
 by mailman.ysv.freebsd.org (Postfix) with ESMTP id E3D5DBC44C1;
 Tue, 23 Aug 2016 17:24:58 +0000 (UTC) (envelope-from kp@FreeBSD.org)
Received: from venus.codepro.be (venus.codepro.be [IPv6:2a01:4f8:162:1127::2])
 (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256
 bits))
 (Client CN "*.codepro.be", Issuer "Gandi Standard SSL CA 2" (verified OK))
 by mx1.freebsd.org (Postfix) with ESMTPS id B1B8C1952;
 Tue, 23 Aug 2016 17:24:58 +0000 (UTC) (envelope-from kp@FreeBSD.org)
Received: from [192.168.228.1] (unknown
 [IPv6:2a02:1811:2419:4e02:c5a8:54ca:244d:6bbf])
 (Authenticated sender: kp)
 by venus.codepro.be (Postfix) with ESMTPSA id A518DA28A;
 Tue, 23 Aug 2016 19:24:55 +0200 (CEST)
From: "Kristof Provost" <kp@FreeBSD.org>
To: "Ernie Luzar" <luzar722@gmail.com>
Cc: "Freebsd Questions" <FreeBSD-questions@freebsd.org>,
 "freebsd-jail@freebsd.org" <freebsd-jail@freebsd.org>
Subject: Re: 10.x or 11.0 and pf firewall in vimage jail
Date: Tue, 23 Aug 2016 19:24:55 +0200
Message-ID: <191F87D2-012E-4C57-9FF7-AAB3D5E010E5@FreeBSD.org>
In-Reply-To: <57BC7FE4.7010801@gmail.com>
References: <57BC7FE4.7010801@gmail.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Transfer-Encoding: 8bit
X-Mailer: MailMate (2.0BETAr6052)
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <https://lists.freebsd.org/mailman/options/freebsd-questions>, 
 <mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions/>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <https://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
 <mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 23 Aug 2016 17:24:59 -0000

On 23 Aug 2016, at 18:55, Ernie Luzar wrote:
> Would like to talk with anyone who has a working pf firewall on the 
> host and in a vnet/vimage jail running on version 10.x or 11.0.
> Looking for details about pf configuration and setup.
>
pf on the host should work just fine in combination with vimage. I’ve 
been running such a setup since at least 10.0.

It’s a relatively simple setup: a couple if vimage jails with epair 
interfaces, one end in the jail, the other in a bridge.

What are you having issues with?

Regards,
Kristof