From owner-freebsd-questions@FreeBSD.ORG Fri Jul 9 21:55:35 2010 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id A433F106566B for ; Fri, 9 Jul 2010 21:55:35 +0000 (UTC) (envelope-from merlyn@stonehenge.com) Received: from red.stonehenge.com (red.stonehenge.com [208.79.95.2]) by mx1.freebsd.org (Postfix) with ESMTP id 912CA8FC08 for ; Fri, 9 Jul 2010 21:55:35 +0000 (UTC) Received: by red.stonehenge.com (Postfix, from userid 1001) id 3A13E31905; Fri, 9 Jul 2010 14:55:35 -0700 (PDT) From: merlyn@stonehenge.com (Randal L. Schwartz) To: Michael References: <4C378D58.5010404@gmail.com> x-mayan-date: Long count = 12.19.17.9.4; tzolkin = 5 Kan; haab = 17 Tzec Date: Fri, 09 Jul 2010 14:55:35 -0700 In-Reply-To: <4C378D58.5010404@gmail.com> (Michael's message of "Fri, 09 Jul 2010 21:58:00 +0100") Message-ID: <864og89v6w.fsf@red.stonehenge.com> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/23.2 (berkeley-unix) MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Cc: freebsd-questions@freebsd.org Subject: Re: ipfw nat and jails on loopback - is it possible? X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 09 Jul 2010 21:55:35 -0000 >>>>> "Michael" == Michael writes: Michael> Does anybody has a working configuration with ipfw nated jails Michael> on loopback interface? I noticed in my pf.conf that I had "set skip on lo". I changed that to "set skip on lo0" (still advisable), and then created an "lo1" using ipv4_addrs_lo1=127.1.0.1/24 in my /etc/rc.conf, and I can now route in and out just fine. I don't know if ipfw has a similar "don't apply rules to lo0" option, but if that's the case, create an lo1 instead. -- Randal L. Schwartz - Stonehenge Consulting Services, Inc. - +1 503 777 0095 Smalltalk/Perl/Unix consulting, Technical writing, Comedy, etc. etc. See http://methodsandmessages.vox.com/ for Smalltalk and Seaside discussion