how to make a non-vnet jail local only?

Arthur Chance freebsd at
Wed Aug 5 07:17:13 UTC 2020

On 05/08/2020 02:02, Ernie Luzar wrote:
> I have non-vnet jails working that can reach the public internet.
> But now I would like to make some local only non-vnet jails that can
> only access other local only non-vnet jails. BY local meaning have no
> access to the public internet.
> How do I make this happen?
> Thanks for any pointers.

Create a second loopback interface (cloned_interfaces="lo1" in
/etc/rc.conf or ifconfig lo1 create for manual control) and put the
local jails on lo1 without access to any other interface.

The number of people predicting the demise of Moore's Law doubles
every 18 months.

More information about the freebsd-questions mailing list