I was hoping someone could help me out to solve this issue as its been driving me a little crazy for a while.
I have two jails on a host. One jail (mysql) has a public ip (different to the host) on the public interface (em0) and the other jail (http) has an IP on the lo1 interface (say 10.0.0.1). The jail on the lo1 interface is able to access the outside world using pf nat.
When they try to talk with each other, the communication fails because pf blocks the traffic. I have no idea why the communication isn't working because based on my rules it should. All I can see from pf logs is the mysql jail communicating with the http jail via the lo1 interface. For some reason I never see the initial communication from the http jail to the mysql jail, my hunch is the initial communication is being natted but I am not seeing it in the logs.
I do not want to use "set skip on lo1" to solve this issue as it would break a number of other things. Does anyone have any ideas on how I might be able to solve this one?
EDIT: punctuation and grammar
I have two jails on a host. One jail (mysql) has a public ip (different to the host) on the public interface (em0) and the other jail (http) has an IP on the lo1 interface (say 10.0.0.1). The jail on the lo1 interface is able to access the outside world using pf nat.
When they try to talk with each other, the communication fails because pf blocks the traffic. I have no idea why the communication isn't working because based on my rules it should. All I can see from pf logs is the mysql jail communicating with the http jail via the lo1 interface. For some reason I never see the initial communication from the http jail to the mysql jail, my hunch is the initial communication is being natted but I am not seeing it in the logs.
I do not want to use "set skip on lo1" to solve this issue as it would break a number of other things. Does anyone have any ideas on how I might be able to solve this one?
EDIT: punctuation and grammar