# Host Network Forwarding

Use this file for the canonical forwarding change on the FreeBSD host.

## Persistent setting

```sh
sudo sysrc gateway_enable="YES"
```

## Immediate runtime setting

```sh
sudo sysctl net.inet.ip.forwarding=1
```

## Validation

```sh
sysctl net.inet.ip.forwarding
```

Expected:

- `net.inet.ip.forwarding: 1`

## Why it matters

VNET jails on `warden0` cannot route traffic through the host until forwarding
is enabled.

This is a host prerequisite. It is not a Bastille template issue and not a jail
runtime bug.
