[patch] attach ipfw rules to jails
shadow at psoft.net
Mon Jul 5 22:25:41 PDT 2004
В Втр, 06.07.2004, в 00:27, Christian S.J. Peron пишет:
> I have written support for attaching ipfw rules to jails. I am
> looking for some testers/feedback.
> o Apply the patch
> o cd /usr/src && make includes
> o rebuild your kernel (or just the ipfw module)
> o rebuild the ipfw userspace utility;
> ipfw add count ip from any to any jail 1
> "jail" takes a numeric argument, a jail ID.
> For those of you who dont know, jail IDs can be retrieved using
> the jls(8) utility.
> Input would be greatly appriciated.
who not port vimage project to -current ? separated network stack and
firewall rules more and more faster then this...
If system not have jails vimage not add
observable overhead to system..
Alex Lyashkov <shadow at psoft.net>
More information about the freebsd-hackers