Solved PF in jail: /dev/pf: No such file or directory

[He101]

When trying to start pf with service pf start, I get the following error message:

Enabling pfpfctl: /dev/pf: No such file or directory
pfctl: /dev/pf: No such file or directory
pfctl: /dev/pf: No such file or directory

My Jails are confiugred in /etc/jail.conf:

# Global Stuff
exec.start ="/bin/sh /etc/rc";
exec.stop = "/bin/sh /etc/rc.shutdown";
exec.clean;
mount.devfs;
path = "/usr/jail/$name";

# Jail definition for www.
testjail {
   host.hostname = "testjail.server.domain.com";
   ip4.addr = 10.8.3.10;
}
nginx {
   host.hostname = "nginx.server.domain.com";
   ip4.addr = 10.8.3.20;
}

I used the following commands to create the basejail and "clone" it to a new jail

# zfs create zroot/jails/_base
bsdinstall jail /zroot/jails/_base
chroot /zroot/jails/_base
# ... bootstrap and set up the jail
zfs snapshot zroot/jails/_base@11.0-bootstrapped
zfs send -R zroot/jails/_base@11.0-bootstrapped | zfs receive zroot/jails/testjail

PF is enabled and working on the host. What am I doing wrong?

 

[getopt]

What am I doing wrong?

You should not want what is contrary to the design. Kernel stuff is meant to be used on the jail-host.
So long story short PF does not run in jails.

 

[SirDice]

Jails cannot change their network settings, this includes the firewalls, by default. This is only possible with VNET/VIMAGE jails.