bastion {
    path = "/jail/${name}";
    vnet;
    exec.prestart += "/usr/local/bin/jail_netgraph_bridge start jail_nat jail${name} 10.215.1.1/24";
    exec.poststop += "sleep 10; /usr/local/bin/jail_netgraph_bridge stop jail_nat jail${name}";
    vnet.interface += "jail${name}";

    devfs_ruleset = 14;
    mount.devfs;
    mount.fstab = "/etc/fstab.${name}";

    exec.start += "/bin/sh /etc/rc";
    exec.stop = "/bin/sh /etc/rc.shutdown jail";
    exec.consolelog = "/var/log/jail_${name}_console.log";
}