simple NAT for jails
ait at p2ee.org
Thu Dec 9 20:18:37 UTC 2010
On Thu, Dec 9, 2010 at 12:23 PM, Eitan Adler <lists at eitanadler.com> wrote:
> I want to throw together some jails for friends to play with. I'm not
> terribly concerned about security on this machine. My goal is to do
> something like
> ezjail create james 10.0.0.1
> ezjail create jared 10.0.0.2
> ezjail create joe 10.0.0.3
> ezjail create idaho 10.0.0.4
> I have a single IP address for my computer - so I would need some kind
> of nat to allow these jails to access the outside world - and allow
> the outside world to access them.
> I've looked into pf and I guess I would need something like
> nat on nfe0 from 10.0.0.1 to any -> $external_ip
> is this correct?
> Do I need anything in in /etc/pf.conf ?
you can use natd as well in rc.conf
then as root in the base system
natd -n rl1
or whatever your interface is
> Eitan Adler
> freebsd-questions at freebsd.org mailing list
> To unsubscribe, send any mail to "freebsd-questions-unsubscribe at freebsd.org"
More information about the freebsd-questions