On Fri, May 05, 2006 at 03:13:07PM +0200, Michael Grant wrote:
> I ran across this web page:
> 
> http://www.muine.org/~hoang/freenat.html
> 
> It implies that both ipfw and ipfilter can be used simultaneously on
> the same box, using ipfilter as the main firewall and ipfw just to
> shape the traffic via dummynet.  I did not think that this was
> possible.  Anyone out there tried this?  Any gotchas?

It should work. However, there is a problem when you NAT/RDR in
combination with dummynet. Sometimes all packets get dropped for
no apparent reason. I haven't investigated this, because
usually you can circumvent the problem by doing dummynet on the
other interface that NAT operates on.

-Guido

Reply via email to