In jail under TrueNAS 11, was mail server that can block IPs by IPFW rules. Now I move JAIL to FreeBSD 13.1, and detect that same JAIL with same settings, not allow to load IPFW inside jail.
kldload ipfw kldload: can't load ipfw: Operation not permitted
For JAILs managemnt use iocage
"allow_raw_sockets": 1, "vnet": 1, "dhcp": 1, "bpf": 1
How now block bad users by analyze with Fail2BAN mail log. Do it outside of JAIL ? Or can allow run IPFW inside of jail ?