Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 15 Dec 2018 17:23:09 +0000
From:      bugzilla-noreply@freebsd.org
To:        bugs@FreeBSD.org
Subject:   [Bug 234021] 12.0 gateway host with vnet jail running pf firewall & NAT has no internet access
Message-ID:  <bug-234021-227-Xb33cuOUBy@https.bugs.freebsd.org/bugzilla/>
In-Reply-To: <bug-234021-227@https.bugs.freebsd.org/bugzilla/>

index | next in thread | previous in thread | raw e-mail

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=234021

--- Comment #6 from Joe Barbish <qjail1@a1poweruser.com> ---
As shown in the original post the nat statement in the pf rules file does have
the public ip address. Look at pip.

#vnet jails pf rules file
oif=epair15b
jip=10.0.110.25
pip=65.xxx.62.234

set block-policy drop
set fail-policy drop
set state-policy if-bound
scrub in on $oif all
set skip on lo0           

nat on $oif from $jip to any -> $pip

block out log quick on $oif inet proto tcp from any to any port 43
pass out  log (all) quick on $oif from any to any
pass in   log (all) quick on $oif from any to any

-- 
You are receiving this mail because:
You are the assignee for the bug.

home | help

Want to link to this message? Use this
URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-234021-227-Xb33cuOUBy>