Alexander V. Chernikov melifaro at
Wed Jun 20 14:46:44 UTC 2012

On 19.06.2012 12:56, Sami Halabi wrote:
> Hi,
> I want to ask aout VNET jails, i read somehwre that I'm able to run IPFW,
> but not PF firewall in a cnet jail.
> is that correct?
> i want a vnet jail basicly for nat, so natd with ipfw + ipdivert is my
1) You can do nat without vnet.
2) ipfw nat is currently the easiest way to do nat.

> choice? or i can use pf somehow, I never used pf before,
> so i would like some advise here...
> Thanks in advance,

WBR, Alexander

More information about the freebsd-pf mailing list