Re: kern/169206: [ipfw] ipfw does not flush entries in table

2012-06-20 Thread Alexander V. Chernikov 
The following reply was made to PR kern/169206; it has been noted by GNATS.

From: Alexander V. Chernikov melif...@freebsd.org
To: bug-follo...@freebsd.org, pi...@pixel.org.pl
Cc:  
Subject: Re: kern/169206: [ipfw] ipfw does not flush entries in table
Date: Wed, 20 Jun 2012 18:29:18 +0400

 Is it possible for you to upgrade this box to latest 8-STABLE (at least 
 r237309) and check if this helps?
___
freebsd-ipfw@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-ipfw
To unsubscribe, send any mail to freebsd-ipfw-unsubscr...@freebsd.org

Re: VNET

2012-06-20 Thread Alexander V. Chernikov 

On 19.06.2012 12:56, Sami Halabi wrote:

Hi,

I want to ask aout VNET jails, i read somehwre that I'm able to run IPFW,
but not PF firewall in a cnet jail.
is that correct?

i want a vnet jail basicly for nat, so natd with ipfw + ipdivert is my

1) You can do nat without vnet.
2) ipfw nat is currently the easiest way to do nat.


choice? or i can use pf somehow, I never used pf before,
so i would like some advise here...

Thanks in advance,




--
WBR, Alexander
___
freebsd-ipfw@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-ipfw
To unsubscribe, send any mail to freebsd-ipfw-unsubscr...@freebsd.org

Re: VNET

2012-06-20 Thread Sami Halabi 
Thank you.

I want to use vnet jail for a specific subnet that I need to seperate from
the system.
so basicly i create a vlan + a bridged interface to the public.
these two (vlan+bridged interface- epair0a) will in in the vnet jail, so I
can do NAT only for that vlan going out.
This is the idea, as there are more interfaces in the system and there is
only one interface out...

so basicly it should be a firewall  Nat only between the specific lan and
the outside world.

Can this be accomplished otherway?

Sami

On Wed, Jun 20, 2012 at 5:43 PM, Alexander V. Chernikov 
melif...@freebsd.org wrote:

 On 19.06.2012 12:56, Sami Halabi wrote:

 Hi,

 I want to ask aout VNET jails, i read somehwre that I'm able to run IPFW,
 but not PF firewall in a cnet jail.
 is that correct?

 i want a vnet jail basicly for nat, so natd with ipfw + ipdivert is my

 1) You can do nat without vnet.
 2) ipfw nat is currently the easiest way to do nat.


  choice? or i can use pf somehow, I never used pf before,
 so i would like some advise here...

 Thanks in advance,



 --
 WBR, Alexander




-- 
Sami Halabi
Information Systems Engineer
NMS Projects Expert
FreeBSD SysAdmin Expert
___
freebsd-ipfw@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-ipfw
To unsubscribe, send any mail to freebsd-ipfw-unsubscr...@freebsd.org