jails and ipfw2

[Chris]

My server, with a public IP address, is running named and sshd. This server is also running IPFW2.

There is a jail also running, with it's own unique public IP address. I have found that IPFW2 will filter traffic to/from the jail, no matter if I put the jail's alias on the ethernet device (fxp0) or the loopback device (lo0). Is there an advantage or disadvantage to doing it one way vs the other?

Thanks,
Chris