simple NAT for jails

Eitan Adler lists at eitanadler.com
Thu Dec 9 17:46:30 UTC 2010


Hi,
I want to throw together some jails for friends to play with. I'm not
terribly concerned about security on this machine. My goal is to do
something like
ezjail create james 10.0.0.1
ezjail create jared 10.0.0.2
ezjail create joe 10.0.0.3
ezjail create idaho 10.0.0.4

I have a single IP address for my computer - so I would need some kind
of nat to allow these jails to access the outside world - and allow
the outside world to access them.

I've looked into pf and I guess I would need something like

nat on nfe0 from 10.0.0.1 to any -> $external_ip

is this correct?
Do I need anything in in /etc/pf.conf ?

-- 
Eitan Adler


More information about the freebsd-questions mailing list