New blog post: PF Firewall on FreeBSD - A Practical Guide

After years of running PF across multiple FreeBSD servers, I've written up the patterns that work: macros, tables, brute-force protection, NAT for jails, and dual-stack filtering.

Covers everything from basic concepts to production configs, plus a sidebar on authpf for bastion hosts.

If you're running FreeBSD and want a firewall that's elegant, powerful, and actually understandable, PF is worth your time.

https://blog.hofstede.it/pf-firewall-on-freebsd-a-practical-guide/

#FreeBSD #PF #Firewall #Security #Jails #SysAdmin #IPv6

#USMilitary Helping #Trump to Build Massive Network of ‘#ConcentrationCamps,’ #Navy Contract Reveals

The #DepartmentOfHomelandSecurity is using a repurposed $55 billion Navy contract to convert #warehouses into makeshift #jails and plan sprawling #TentCities in remote areas.

Stephen Prager, Feb 02, 2026

Excerpt: "According to a source familiar with the project, 'the goal is for the facilities to house as many as 10,000 people each, and are expected to be built in #Louisiana, #Georgia, #Pennsylvania, #Indiana, #Utah, and #Kansas.'

"Now Manríquez reports that the project has just gotten much bigger after a Navy grant was repurposed weeks ago. It was authorized through the Worldwide Expeditionary Multiple Award Contract (WEXMAC), a flexible purchasing system that the government uses to quickly move military equipment to dangerous and remote parts of the world.

"The contract states that the money is being repurposed for '#TITUS,' an abbreviation for 'Territorial Integrity of the United States.' While it’s not unusual for Navy contracts to be used for expenditures aimed at protecting the nation, Manríquez warned that such a staggering movement of funds for domestic detention points to something ominous. "

Read more:
https://www.commondreams.org/news/military-contract-concentration-camps

#USPol #DetentionCenters #PrivatePrisons #Authoritarianism #Fascism #CriminalizingDissent #SilencingDissent #SilencingDissent #DepartmentOfHomelandInsecurity

I'm having a hard time setting up a VNET jail on freebsd.

The jail can't talk to the host/internet

I can send more info if anyone interested in helping me

(important to say that I'm also trying FreeBSD for the first time)

#freebsd #jails #bsd

Former Ohio inmate sues Hamilton County Jail officials for assault, battery, and excessive force

An Ohio man is alleging he was assaulted by corrections officers who used excessive force while he was incarcerated at the Hamilton County Jail. 

https://ohiocapitaljournal.com/2026/02/03/former-ohio-inmate-sues-hamilton-county-jail-officials-for-assault-battery-and-excessive-force/#criminal-justice-&-policing #hamilton-county #hamilton-county-jail #jail #jails #ohio-jails #the-courts #united-states-district-court-for-the-southern-district-of-ohio

#TomHoman addressed reporters for the first time since #Trump sent him to #Minneapolis after a #CBP agent fatally shot a protester Saturday.

Bag-o’-cash Homan doubled down on the need for local #jails to alert #ICE to people in their custody whom ICE can remove from the country, & that transferring immigrants to ICE while they’re still in #jail is safer for the officers & means they aren’t out on the streets.

#Trump #MafiaState #law #DueProcess #CivilRights #UseOfForce #murder #Sturmabteilung

#Kazakhstan #Jails #Belgian Fans for #Mankini Stunt

https://ground.news/article/kazakhstan-jails-belgian-fans-for-mankini-stunt

Finaly migrated the last homelab server from #FreeBSD 14.3 to #FreeBSD15 including the #jails . All without a hickup thanks to the fine work of the #freebsd devs and the #bastille devs.

Just published a deep dive on self-hosting CryptPad on FreeBSD using VNET jails, PF NAT, and Caddy.

End-to-end encrypted collaboration, fully isolated networking, no direct internet exposure for the app jail, and a few real-world gotchas (including the infamous “Loading…” issue).

If you like FreeBSD, jails, and privacy-first self-hosting, this one’s for you.

https://blog.hofstede.it/self-hosted-cryptpad-on-freebsd-with-vnet-jails-and-caddy/

#FreeBSD #SelfHosting #Privacy #Jails #CryptPad

Useful toolkit from the Marshall Project on how best to report on and investigate deaths in #jails and #prisons. #journalism #criminaljustice https://www.themarshallproject.org/2025/01/31/deaths-custody-jail-prison-investigation-records

Useful toolkit from the Marshall Project on how best to report on and investigate deaths in #jails and #prisons. #journalism #criminaljustice https://www.themarshallproject.org/2025/01/31/deaths-custody-jail-prison-investigation-records

Can you use a #freebsd vnet jail over WiFi? Tried to follow the handbook and created a bridge and epair. But I saw 2 blogs/comments that said that doesn't work.

Somewhere else said to use NAT? My goal was to have the host use wireguard on the host and have a jail that bypasses that and uses wlan0. But I can't seem to get a basic vnet jail working.

#bsd #jails #freebsdjails

@lattera you do great work and you get things done #nomad bsd iso #entropy pools #jails

What's your favorite FreeBSD feature?

We love Jails most (of course) followed by ZFS!

Share yours in the comments.

#FreeBSD #ZFS #Jails #Community

Vorhaben für die nächsten Tage:

- #Gopher installieren, zusätzlich zu #Gemini
- DNS-Challenge für Zertifikate in den Griff bekommen. Einige Dienste hätten gerne sowas, laufen bei mir aber strikt intern.
- #Journiv antesten
- erste Schritt in #FreeBSD, #Bastille und #Jails

Looking into #Jails on #FreeBSD, is #iocage still the best option? #Bastille also looks really nice and no dependencies... (coming from an old Synology setup that utilized Docker).

I know how most of you feel about WaPo, but I go by the journalists’ records of journalistic integrity. It’s hard to get a job as an investigative reporter. Also this is an exclusive … so, #GiftArticle

#Trump admin #jails #immigrant #teens in facility known for #ChildAbuse

#law #immigration #ChildEndangerment #ChildSexCrimes #SexualAssault #rape #StateSponsoredAbduction #UseOfForce #PoliceBrutality #CivilRights #HumanRights #HumanitarianLaw #ICE #CBP #WhiteSupremacy
https://wapo.st/4sLbPMe

Did upgrade all the remaining service jails on our burningborad.net Mastodon instance to FreeBSD 15.0-RELEASE today, after the host was already upgraded one and a half weeks ago.

Everything running smoothly :) Only nodejs in the mastodonweb jail needed some additional "convincing" and a deletion of the node_modules folder plus a fresh "yarn install --frozen-lockfile"

Now everything is up to date again 🙂

#freebsd #bastillebsd #jails #sysadmin #mastoadmin #upgrade #mastodon

As for #FreeBSD #jails security. The post at https://vermaden.wordpress.com/2025/04/11/freebsd-jails-security/ from earlier 2025 is a nice though somewhat opinionated summary, but in hindsight of end-of-2025 research (https://github.com/iljavs/FreeBSD-Jail-Security-Research-Mirror), might be nice to get some updates.

blackship

― a FreeBSD jail orchestrator with TOML configuration, dependency management, state machine lifecycle control, ZFS integration, VNET, and jailfile templates.

<https://github.com/seuros/blackship> via <https://old.reddit.com/r/freebsd/comments/1q2symh/the_black_ship_a_jail_orchestrator_with/>

– The Black Ship

#FreeBSD #jails