nat_dhcp {
    path = "/jail/main/jails/nat_dhcp";
    vnet;
    vnet.interface += "host_link3";
    devfs_ruleset = 14;
    mount.devfs; # To expose tun device

    exec.start += "/bin/sh /etc/rc";
    exec.stop = "/bin/sh /etc/rc.shutdown jail";
    exec.consolelog = "/var/log/jail_${name}_console.log";
}