From owner-freebsd-security Tue Sep 18 10:47:27 2001 Delivered-To: freebsd-security@freebsd.org Received: from smtprelay2.abs.adelphia.net (smtprelay.abs.adelphia.net [64.8.20.11]) by hub.freebsd.org (Postfix) with ESMTP id 2B33D37B40E for ; Tue, 18 Sep 2001 10:47:22 -0700 (PDT) Received: from GANDALF ([24.48.164.64]) by smtprelay2.abs.adelphia.net (Netscape Messaging Server 4.15) with SMTP id GJVDD700.X8N for ; Tue, 18 Sep 2001 13:46:19 -0400 Message-ID: <003701c14069$bb1d2e00$7811a8c0@GANDALF> From: "Andrew Penniman" To: Subject: ipfw in a jail-centric environment? Date: Tue, 18 Sep 2001 13:45:38 -0400 MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_0034_01C14048.33667460" X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2600.0000 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000 Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org This is a multi-part message in MIME format. ------=_NextPart_000_0034_01C14048.33667460 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable I'm playing with jails for the first time and am not sure how to handle = packet filtering in this scenario. Should the host and jail environments each handle their own packet = filtering or is all filtering handled by the host? Is natd required? I have tried to locate information on this subject but haven't found = anything useful.... Thanks much, Andrew Penniman ------=_NextPart_000_0034_01C14048.33667460 Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable
I'm playing with jails for the first = time and am=20 not sure how to handle packet filtering in this scenario.
 
Should the host and jail environments = each handle=20 their own packet filtering or is all filtering handled by the = host?  Is=20 natd required?
 
I have tried to locate information on = this subject=20 but haven't found anything useful....
 
Thanks much,
Andrew = Penniman
------=_NextPart_000_0034_01C14048.33667460-- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message