how to make a non-vnet jail local only?

[Arthur Chance]

On 05/08/2020 02:02, Ernie Luzar wrote:
> I have non-vnet jails working that can reach the public internet.
> But now I would like to make some local only non-vnet jails that can
> only access other local only non-vnet jails. BY local meaning have no
> access to the public internet.
> 
> How do I make this happen?
> 
> Thanks for any pointers.

Create a second loopback interface (cloned_interfaces="lo1" in
/etc/rc.conf or ifconfig lo1 create for manual control) and put the
local jails on lo1 without access to any other interface.

-- 
The number of people predicting the demise of Moore's Law doubles
every 18 months.