How to use pf with vimage jails?

[Alan Somers]

On Wed, May 4, 2016 at 4:23 AM, Kristof Provost <kristof at sigsegv.be> wrote:

>
> > On 04 May 2016, at 04:55, Alan Somers <asomers at freebsd.org> wrote:
> >
> > Is there any documentation on how to run pf on a host, using it to
> control
> > access to vimage jails?  I see that only ipfw can be run from _inside_ of
> > the jail, but I'm interested in running pf _outside_ of the jail.
>
> That’s supported, and really no different from configuring pf otherwise.
> Just treat the vimage jails as if they were on different machines, behind
> your firewall.
>
> Regards,
> Kristof
>
>
Then maybe it's the bridged aspect that's screwing me up.  Is there a guide
for using pf on bridged interfaces?  All I can find is this guide for ipfw.

https://www.freebsd.org/doc/en/articles/filtering-bridges/article.html

-Alan