When your jails are on a private network how do you reach them from the outside? Redirect the port from the host:
bastille rdr TARGET tcp 443 443
bastille rdr TARGET tcp 2200 22
List them with bastille rdr TARGET list, clear with ... clear.
VNET jails don't need and don't use this.
