After starting vnet jail using jail.conf as shown in /usr/share/examples/jails to use jng and logging in to the jail and issue ping -c 2 1.1.1.1 receive following message ping: sendto: Network is unreachable After starting vnet jail using jail.conf as shown in /usr/share/examples/jails to use jib and logging in to the jail and issue ping -c 2 1.1.1.1 got 100% packet loss. Running on real hardware fbsd 12.1 The /usr/share/examples/jails contains examples of using rc.conf to define jails which is obsolete since fbsd release 10.0 and should be removed.
Thanks for reporting. I will have a look to see what has changed with respect to ICMP packets in a vnet jail. I bet some sysctl has to be twisted or something. ASIDE: rc.conf based jails are not going anywhere, to my knowledge, as jail.conf based jails cannot be managed as easily (whereas rc.conf jails can easily be managed in a site using sysrc).