Hacker News Reader

Regarding jails - I do use separate loopback device per jail, plus pf with nat. No issues with firewalling.

Same .. I don’t use the separate loop back. Just firewall what I need to firewall .