I will soon be moving to an environment where I don't control my LAN, and can't have jails with their own IPs.
I enabled NAT on all my jails using the checkbox in the WebUI. Most everything was configured as expected, except there's no internet connectivity in the jails. Upon further inspection, it appears that packets are escaping the NAT just fine, but the replies (eg. DNS) arrive but do not make it onto the bridge.
The ipfw rules look correct (see below) and I would expect the return...
Jails w/ NAT not handling incoming packets
I enabled NAT on all my jails using the checkbox in the WebUI. Most everything was configured as expected, except there's no internet connectivity in the jails. Upon further inspection, it appears that packets are escaping the NAT just fine, but the replies (eg. DNS) arrive but do not make it onto the bridge.
The ipfw rules look correct (see below) and I would expect the return...
Jails w/ NAT not handling incoming packets