My LAN is 192.168.1.0/24 and I want to be able to create jails:
in that LAN addresses (so reachable from the LAN) but also
'internal' only jails (like 10.0.2.1/24) that are not reachable from the LAN but natted to the outside world (so they can reach out internet and LAN services but no...