bastille

Hi all, DiscIaimer: I only partially understand what I am doing. I set up a FreeBSD 13.0 Host with. BastilleBSD. Everything working fine but I struggle with the configuration of the pf packet filter, which is new to me (only used ipfw since). My goal is to be as restrictive as possible without...

I am using PF and cannot get packets forwarded to a particular jail. I want data that comes into my base machine on port 4243 to be forwarded to my jail that has a service that is listening on port 4243. I have verified with telnet that the jail can receive data on that port. Here is my...

How do I make devices in /dev/ accessible inside a Bastille jail? When I have two sets of rules, how do I set this in rc.conf.local, from within the host system? devfs_system_ruleset="localrules" How would bastille also get referenced with this? In devfs.rules of the host (not within the...

I am trying to play media trough SSH running VLC in a bastille jail called briarcliff with the IP 192.168.1.1 and when I run ssh -CY briarcliff vlc the VLC interface loads, but when I play an audio file, no sound comes out at all. And when I try to play a video file, it just blinks between all...

I have made a bastille container called briarcliff and installed LibreOffice and xauth in it when I try to run LibreOffice trough ssh on the host The splash screen shows up but it gets stuck there and libreoffice never loads. I ran ssh -vvv -CY briarcliff libreoffice but I don't understand the...

dear my friends I configured Bastille and it works well but there is another problem which I don't know how to handle it. Internet > Firewall > VMWare > FreeBSD > BastilleOS how can I configure BastilleOS to access the Internet? I want to access the internet from my BastilleOS? and How...

Yesterday I put the source code online for a simple utility, Bastille, which facilitates the creation and management of jails that share the same system components. In that sense, it's similar to ezjail, but that's actually all Bastille does. Bastille does not provide its own service, relying...