testing 11.0-RC1 vnet jails with ipfilter

Bjoern A. Zeeb bzeeb-lists at lists.zabbadoz.net
Tue Aug 16 15:45:02 UTC 2016


On 16 Aug 2016, at 12:47, krad wrote:

> is ipfilter supported in vnet jails? Last time I looked and tried pf 
> didnt
> work (kernel panics), and only ipfw was supported.

In 11-RC* it is present for all 3 firewalls;  like VIMAGE due to memory 
footprint you might have to compile the firewall into the kernel rather 
than kldload it (especially ipfilter).

/bz


More information about the freebsd-questions mailing list