On 1/6/13 10:59 PM, Sami Halabi wrote:
Hi,
Thank you for the help.
sysctl net.inet.ip.fw.one_pass=0
introduces some issues to my configuration limits in my current
configuration, because limits aren't applied correctly since we continue
after the pipe, eg:
i had:
1900 pipe 1000 all from x.y.z.1 to any
2000 pipe 1001 all from any to x.y.z.1
2100 pipe 2000 all from x.y.z.0/24 to any
2100 pipe 2001 all from any to x.y.z.0/24
look at using the tablearg option with the pipe command.
1900 pipe tablearg all from table(1) to any
1902 pipe tablearg all from any to table(2)
should allow you to do it all in 2 rules if you set up the table
correctly.
Tablearg in not mentioned in the 'pipe' command help entry but pipe IS
mentioned in the tablearg section.
let me know if it works!
Julian
.
.
more pipes
.
..
6500 allow all from any to any
so the I had special limit(large) for x.y.z.1 IP but another limit in the
whole /24 that i didn't want it to affect.
any ideas how to solve it? i thought about skipto but I'm not sure how to
use.
Sami
On Sun, Jan 6, 2013 at 1:37 AM, Luigi Rizzo <ri...@iet.unipi.it> wrote:
On Sat, Jan 05, 2013 at 02:51:07PM +0200, Sami Halabi wrote:
Hi Luigi & Ozkan,
Thanks for the response.
Luigi i saw you said in some list never trust italians :), so i went step
by step.
first i put:
me out from a pipe
sysctl net.inet.ip.fw.one_pass=0
ipfw pipe 123 config bw 1Mbit/s mask all
ipfw add 100 pipe 123 out
ipfw add 120 allow ip from any to any
Works like a charm.
Next Step wil be:
ipfw pipe 456 config bw 10Mbit/s
ipfw sched 789 config mask all pipe 123
or it should be:
ipfw sched 789 config mask all pipe 456
the latter.
ipfw add 110 queue 789 out
whats is the correct configuration ?
the mask options isn't well documented, in the handbook its not even
mentiond.
the manpage is slightly more up to date.
The handbook is probably years behind.
cheers
luigi
same goes for scheduler...
I got the feeling that only few here know the options very welll... maybe
I'm wrong?
Sami
On Thu, Jan 3, 2013 at 12:46 PM, ?zkan KIRIK <ozkan.ki...@gmail.com>
wrote:
I think there is a mistake at the sched config line. it should be as
ipfw sched 789 config mask all pipe 456
On Thu, Jan 3, 2013 at 10:29 AM, Luigi Rizzo <ri...@iet.unipi.it>
wrote:
ipfw sched 789 config mask all pipe 123
--
Sami Halabi
Information Systems Engineer
NMS Projects Expert
FreeBSD SysAdmin Expert
_______________________________________________
freebsd-ipfw@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-ipfw
To unsubscribe, send any mail to "freebsd-ipfw-unsubscr...@freebsd.org"
