FreeBSD jail虚拟机突然全都不能上网了（无头绪、未解决）

FreeBSD jail虚拟机突然全都不能上网了，不管是FreeBSD还是Ubuntu，都不能连通外网了。

ubuntu不能apt update ，也不能apt install xxx 。FreeBSD也是不能pkg，不能ping

但是由于jail本身默认就没有放开ping，所以调试起来有些麻烦。

测试wget，发现域名解析有问题。

wget quye.com/index.html
--2024-07-18 22:26:04--  http://quye.com/index.html
Resolving quye.com (quye.com)... failed: Temporary failure in name resolution.
wget: unable to resolve host address ‘quye.com’
 

也就是dns解析的报文没有传过来，怀疑是不是pf防火墙导致的问题？ 

 防火墙规则pf.conf 

tcp_services = "{ ssh, smtp, domain, www, pop3, auth, pop3s,443,5900, 5901 }"
udp_services = "{ domain }"
block all
# pass out on $ext_if proto tcp to any port 443

pass out proto tcp to any port $tcp_services keep state
pass in proto tcp to any port $tcp_services keep state
pass proto udp to any port $udp_services keep state
pass inet proto icmp from any to any
pass out proto tcp to any keep state

把防火墙关掉，问题照旧

service pf stop

把防火墙打开，恢复原样

service pf start

为什么这样呢？

到底怎么回事呢？ 

没有头绪，无从下手

宿主机的services列表

service -e
/etc/rc.d/hostid
/etc/rc.d/zpool
/etc/rc.d/zpoolupgrade
/etc/rc.d/zpoolreguid
/etc/rc.d/zvol
/etc/rc.d/hostid_save
/etc/rc.d/kldxref
/etc/rc.d/zfsbe
/etc/rc.d/zfs
/etc/rc.d/linux
/etc/rc.d/devmatch
/etc/rc.d/cleanvar
/etc/rc.d/ip6addrctl
/etc/rc.d/rctl
/etc/rc.d/mixer
/etc/rc.d/netif
/etc/rc.d/pflog
/etc/rc.d/resolv
/etc/rc.d/devd
/etc/rc.d/newsyslog
/etc/rc.d/syslogd
/etc/rc.d/savecore
/etc/rc.d/pf
/usr/local/etc/rc.d/bastille
/etc/rc.d/dmesg
/etc/rc.d/virecover
/etc/rc.d/motd
/etc/rc.d/cleartmp
/etc/rc.d/gptboot
/etc/rc.d/os-release
/usr/local/etc/rc.d/vm
/etc/rc.d/utx
/usr/local/etc/rc.d/isc-dhcpd
/usr/local/etc/rc.d/cbsdrsyncd
/etc/rc.d/sshd
/usr/local/etc/rc.d/appjail
/etc/rc.d/sendmail
/etc/rc.d/cron
/etc/rc.d/bgfsck
/usr/local/etc/rc.d/cbsdd

问题未解决，先留档。