Progress! I managed to set the defaultrouter via the bastille_network_gateway parameter in the bastille.conf.
The generated inet parameters for dual stack are still wrong. According to a GitHub issue that's already fixed, but because I'm installing via pkg, my version is too old.
I have decided to just manually fix it for now. I don't wanna mess with ports on the host.
Then I had to slightly change my portacl config, because in a VNET jail I also need to set net.inet.ip.portrange.reservedhigh=0, but for that to work securelevel needs to be 0.
So now I set that in the jail.conf and raise it to 2 via rc.conf.
I re-added the rdr rules to the host pf.conf and that's working. Now I just need to configure the jails pf.conf. :3
Jana
npub1je…5c5w7
2025-07-13 10:07:27 UTC
in reply to nevent1q…yyez
Author Public Key
npub1jegqal0zzez0587fal72ayeqpvcas54hmwpdnc7rmsl83tctpatqj5c5w7Seen on
wss://relay.momostr.pinkPublished at
2025-07-13 10:07:27 UTCEvent JSON
{
"id": "f0236d3072c90fffa0a7354331384f61459e4cdd6b2273e236e4866cae9c3f99",
"pubkey": "96500efde21644fa1fc9effcae93200b31d852b7db82d9e3c3dc3e78af0b0f56",
"created_at": 1752401247,
"kind": 1,
"tags": [
[
"proxy",
"https://social.jsteuernagel.de/@jana/114845368143143896",
"web"
],
[
"e",
"82c0902b8230df93bedf0a269ee6dd97aedddbb8188fe1256d84ccfaa5a9709d",
"",
"reply",
"96500efde21644fa1fc9effcae93200b31d852b7db82d9e3c3dc3e78af0b0f56"
],
[
"p",
"96500efde21644fa1fc9effcae93200b31d852b7db82d9e3c3dc3e78af0b0f56"
],
[
"e",
"62d4164b51408a7859faace44fc5632c22ee632b383bcc8790d749e3248667c7",
"",
"root",
"96500efde21644fa1fc9effcae93200b31d852b7db82d9e3c3dc3e78af0b0f56"
],
[
"proxy",
"https://social.jsteuernagel.de/users/jana/statuses/114845368143143896",
"activitypub"
],
[
"L",
"pink.momostr"
],
[
"l",
"pink.momostr.activitypub:https://social.jsteuernagel.de/users/jana/statuses/114845368143143896",
"pink.momostr"
],
[
"-"
]
],
"content": "Progress! I managed to set the defaultrouter via the bastille_network_gateway parameter in the bastille.conf.\n\nThe generated inet parameters for dual stack are still wrong. According to a GitHub issue that's already fixed, but because I'm installing via pkg, my version is too old.\nI have decided to just manually fix it for now. I don't wanna mess with ports on the host.\n\nThen I had to slightly change my portacl config, because in a VNET jail I also need to set net.inet.ip.portrange.reservedhigh=0, but for that to work securelevel needs to be 0.\nSo now I set that in the jail.conf and raise it to 2 via rc.conf.\n\nI re-added the rdr rules to the host pf.conf and that's working. Now I just need to configure the jails pf.conf. :3",
"sig": "187d61f689e6a02e922c9c0d4e9935445f2853e8c1d67839e15936f1ce021fb0187b54a211a4cf44258ca1bb7e395cddb91c2007fa82943c0f34394c9e81cbdf"
}