pf, nat, and asterisk in jail

Shamim Shahriar shamim.shahriar at
Wed Mar 22 08:00:21 UTC 2017

Hi Dave, not sure how exactly you have your jail's in terms of of and the
rest of the network, so cannot give you any definite information. But I
have asterisk box with of where I had to open a range of ports for RTP to
work. If your jail is on the same subnet, you can try that (if your jail m
had its own of, don't forget to open then from the host pf). If your jail
is begging a NAT, I think you will benefit from 1:1 may and then opening
the range for the host.

Hope this helps.

Best regards

On 22 Mar 2017 4:25 am, "David Mehler" <dave.mehler at> wrote:

> Hello,
> I've asked this on freebsd-pf so far no response so thought i'd try here.
> Is anyone using pf with asterisk in a jail? If so how did you get rtp
> going? The sip is going through fine, I'm using 10.3, and my pf policy
> is default deny. Under that circumstance rtp is not going, I know this
> because of the fact that changing the block all to pass all and it all
> works.
> Thanks.
> Dave.
> _______________________________________________
> freebsd-questions at mailing list
> To unsubscribe, send any mail to "freebsd-questions-
> unsubscribe at"

More information about the freebsd-questions mailing list