Here are my dummy net rules. Not sure if they are exactly work or not but they keep my kids from using all the upstream bandwidth. If anyone has a better way, please by all means let me know. The only thing I'm not sure of, is where it goes in the rule set. Here is where I have mine and how it is set up. Hope this helps.
case ${natd_enable} in
[Yy][Ee][Ss])
if [ -n "${natd_interface}" ]; then
${fwcmd} add divert natd all from any to any via
${natd_interface}
fi
;;
esac
${fwcmd} add skipto 20000 ip from any to any bridged
#---------------------- DUMMYNET Config --------------------------
#
${fwcmd} add pipe 1 { tcp or udp } from ${iip1} to any 80-65000
${fwcmd} pipe 1 config mask src-ip 0xffffff00 bw 384Kbit/s queue
20Kbytes
#
${fwcmd} add pipe 2 ip from ${iip1} to any out
${fwcmd} pipe 2 config mask src-ip 0xffffff00 bw 1024Kbit/s queue
20Kbytes
#
${fwcmd} add pipe 3 ip from any to ${iip1} in
${fwcmd} pipe 3 config mask dst-ip 0xffffff00 bw 1024Kbit/s queue
20Kbytes
${iip1} = 192.168.1.0/24
I used "whatmask" in /usr/ports/net-mgmt/whatmask to help figure out
what the netmask was for my subnet in case you use a different subnet
than I.
On Thu, 2004-09-23 at 02:48, Bikrant Neupane wrote:
> Hi,
> When a packet hits "allow | accept | pass | permit" rule the packet is
> accepted and the search is retiminated at that point.
>
> I need to accept the packet but still want the packet to continue travers
> rules further below. However, once it hits "deny | drop" rule it should be
> dropped and the search should terminate at that point. Is that possible with
> IPFW?
>
> regards,
> Bikrant
>
>
> _______________________________________________
> [EMAIL PROTECTED] mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to "[EMAIL PROTECTED]"
--
NetAdmin for the FoxChat.Net IRC Network.
The FoxSurfer Group
signature.asc
Description: This is a digitally signed message part
