Freenas jail with pf (firewall)

[l_b_]

Hi all! I'm playing around with the new jails system in Freenas 9.1 and I'm loving it.

I want to set up a firewall in a jail to restrict access to specific services but I can't get pf to work in a jail.

This is the message I'm getting:

Code:

root@mediahub:/usr/local/etc/znc # service pf onestart
kldload: can't load pf: Operation not permitted
/etc/rc.d/pf: WARNING: Unable to load kernel module pf

I'm just getting started with FreeBSD so I don't know a whole lot about it. Is it possible to run pf in a jail on FreeNAS? If not, would this be a good candidate for a feature request?

 

[cyberjock]

No, and the problem is that data packets in the jail has to go through FreeNAS, so you aren't providing a good security model for your server.

There isn't any way to make this a "feature request" except to run FreeNAS as a jail on pfsense, but pfsense has no jail function for similar reasons. You really should never mix security hardware/software with your other stuff.