Other Firewalling a IP Alias

I'm using a jail with a shared IP (or IP alias), using something like:

Code:
ifconfig sge0 192.168.0.100 netmask 255.255.255.255 alias

I was wondering what would be involved to protect it with the hosts firewall. I'm not using VNET in the jail, and I assume I should just be able to create firewall rules on the host, but how would I tell them to protect the IP of the jail?

I'm open to using either pf or ipfw, depending on which one is more suitable for the job.
 
Back
Top