From owner-freebsd-jail@FreeBSD.ORG Thu May 2 14:30:01 2013 Return-Path: Delivered-To: freebsd-jail@freebsd.org Received: from mx1.freebsd.org (mx1.FreeBSD.org [8.8.178.115]) by hub.freebsd.org (Postfix) with ESMTP id 1491B557 for ; Thu, 2 May 2013 14:30:01 +0000 (UTC) (envelope-from feld@feld.me) Received: from new1-smtp.messagingengine.com (new1-smtp.messagingengine.com [66.111.4.221]) by mx1.freebsd.org (Postfix) with ESMTP id D9B611FFA for ; Thu, 2 May 2013 14:30:00 +0000 (UTC) Received: from compute5.internal (compute5.nyi.mail.srv.osa [10.202.2.45]) by gateway1.nyi.mail.srv.osa (Postfix) with ESMTP id 73B322088 for ; Thu, 2 May 2013 10:29:59 -0400 (EDT) Received: from frontend2.nyi.mail.srv.osa ([10.202.2.161]) by compute5.internal (MEProxy); Thu, 02 May 2013 10:29:59 -0400 DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; d=feld.me; h= content-type:to:subject:references:date:mime-version :content-transfer-encoding:from:message-id:in-reply-to; s= mesmtp; bh=gYjrriCbi+be06udOo4RJpdRILk=; b=Gg7pVuTf/baadbyVOGJ7Y rv5KFBF08h6AcopndnMhF8cP1FYHxz/CMRn97cxigH4mdR0Qv8WwczTYkpJbRZ2r uxn53JIXQCgpBpeI3sidykv8ZqvZVN0LZLuY2evzXDb23HpCSgvgBBWLVkYQvYYz 8FNNVxJG1uo+F1YQN/PWq0= DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; d= messagingengine.com; h=content-type:to:subject:references:date :mime-version:content-transfer-encoding:from:message-id :in-reply-to; s=smtpout; bh=gYjrriCbi+be06udOo4RJpdRILk=; b=rNXg BuV4Ixo6v4k8muviKHsUR8V4lq2xdzYqyc3/XSC9m2ua44v0qoh4esiK1KFDfVsT Q0k1h4EefRhawsaON4gHQJX/cT4psfp+ijkTT7HbOl7AF+E1TBwnX74UI+dvpNFK 9+cpS09Gqz08yS00cbcL79jnjw/lw9jBDKiO3hA= X-Sasl-enc: nKhojKzNBlySKZgiSpgoEAOJkGNqilHmrQEUTvFHi6xT 1367504999 Received: from tech304.office.supranet.net (unknown [66.170.8.18]) by mail.messagingengine.com (Postfix) with ESMTPA id 1324220016C for ; Thu, 2 May 2013 10:29:59 -0400 (EDT) Content-Type: text/plain; charset=us-ascii; format=flowed; delsp=yes To: freebsd-jail@freebsd.org Subject: Re: vnet jail with ipfw having logging problem References: <44AC45947DA14449AEDFB13B9F6C5F7DAF3E1FA5@ltcfiswmsgmb25> <517A7BCB.8060604@a1poweruser.com> <13CA24D6AB415D428143D44749F57D7201F22068@ltcfiswmsgmb21> <517D3426.1090703@a1poweruser.com> <51805EFB.6050806@a1poweruser.com> <20130502021830.O30818@sola.nimnet.asn.au> <51818C67.7070708@a1poweruser.com> <20130502142443.V30818@sola.nimnet.asn.au> <51826EF7.30302@a1poweruser.com> Date: Thu, 02 May 2013 09:29:58 -0500 MIME-Version: 1.0 Content-Transfer-Encoding: 7bit From: "Mark Felder" Message-ID: In-Reply-To: <51826EF7.30302@a1poweruser.com> User-Agent: Opera Mail/12.14 (FreeBSD) X-BeenThere: freebsd-jail@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: "Discussion about FreeBSD jail\(8\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 02 May 2013 14:30:01 -0000 On Thu, 02 May 2013 08:49:43 -0500, Joe wrote: > > I tested doing a kldload ipfw and fall into the default deny problem. > Is there a sysctl to flip the default deny to default accept? > options IPFIREWALL_DEFAULT_TO_ACCEPT when you build the kernel is the only way AFAIK