What if you use something like QEMU? it's in the ports and you could create a openbsd box with Pf and more and then try probe your stuff. if you attach the virtual interface to a tap interface it could works.
2007/5/24, Michael <[EMAIL PROTECTED]>: > > Hi, > > Gordon Ross schrieb: > > You mean something like: > > > > ifconfig xl0 alias 192.168.1.2 ? > No, everything that gets send out initially using xl0 will be tagged > with the main IP of xl0 if not explicitly specified otherwise like you > can do with ping -I. > > In case when using sysjails and using ping or other stuff from within > the sysjail that send the initial packt I want the packets coming from > the sysjail IP and not the main interface IP. > > That would also allow me to block all outgoing traffic with PF that > comes from within the sysjail and only allow response packets to an > already established state. > > > Michael
