Re: FreeBSD 6.0 - ipfw fwd with bridge mode

2005-11-20 Thread Julian Elischer

Özkan KIRIK wrote:

Hi,

i am trying to forward packets via ipfw in bridge mode.
is there any patch for 6.0-Release?

thanks for your interests,
___
freebsd-net@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-net
To unsubscribe, send any mail to "[EMAIL PROTECTED]"



there are two patches to do this with 4.x

one by luigi and one by a company I know of.

neither is exactly correct for 6.0

The simplest one just "accepts" the packet as local which means that it
gets run through ipfw again in the IP stack at which time it is
REALLY forwarded.

___
freebsd-ipfw@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-ipfw
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Ipfw and qmail-smtpd, connections getting stuck - FIN_WAIT_1 FIN_WAIT_2

2005-11-20 Thread Vini Engel

Hi guys,

I was wondering if anyone here has had anything similar with ipfw and
qmail-smtpd. I have a FreeBSD 5.3 and 5.4 box running qmail and often I
can see many connections with FIN_WAIT_1, FIN_WAIT_2, LAST_ACK, CLOSING.

On this box I have some ipfw limit rules to allow incoming connections 
and normal keep-state rules to allow outgoing connections. In the 
beginning I thought it was being caused by the sysctl 
net.inet.ip.fw.dyn_keepalive. I then disabled the keep-alive, it seems 
to have helped but still there are many connections stuck at the FIN stage.


Does anybody have any tips on this?

Thanks a lot
Vini
___
freebsd-ipfw@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-ipfw
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: strange dummynet WFQ problem

2005-11-20 Thread Luigi Rizzo
On Sun, Nov 20, 2005 at 07:40:01PM -0200, AT Matik wrote:
> On Sunday 20 November 2005 19:25, Luigi Rizzo wrote:
> > On Sun, Nov 20, 2005 at 07:16:40PM +0100, Alexandre DELAY wrote:
> > > Interresting. I didn't find anythong about that.
> > > Where can I learn more about this "priorities"?
> >
> > well, dummynet does not du priorities but weights.
> > lookup google for "WFQ"
> > or read the ipfw manpage.
> >
> 
> ehh, I guess he wanted to know why icmp echo is beeing queued because you 
> said 
> it before

because that's what is written in his ruleset.
(at list i suppose - he did not sent "ipfw queue show" output
but from his previous example he did not put masks on the queues).

___
freebsd-ipfw@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-ipfw
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: strange dummynet WFQ problem

2005-11-20 Thread AT Matik
On Sunday 20 November 2005 19:25, Luigi Rizzo wrote:
> On Sun, Nov 20, 2005 at 07:16:40PM +0100, Alexandre DELAY wrote:
> > Interresting. I didn't find anythong about that.
> > Where can I learn more about this "priorities"?
>
> well, dummynet does not du priorities but weights.
> lookup google for "WFQ"
> or read the ipfw manpage.
>

ehh, I guess he wanted to know why icmp echo is beeing queued because you said 
it before

João






> cheers
> luigi
>
> > Alex
> >
> >
> > -Message d'origine-
> > De : Luigi Rizzo [mailto:[EMAIL PROTECTED]
> > Envoye : dimanche 20 novembre 2005 19:10
> > A : Alexandre DELAY
> > Cc : freebsd-ipfw@freebsd.org
> > Objet : Re: strange dummynet WFQ problem
> >
> > On Sun, Nov 20, 2005 at 07:04:47PM +0100, Alexandre DELAY wrote:
> > > It effectively works well, but I still have a problem:
> > >
> > > When I use my bandwidth (download a huge file) and I start a ping at
> > > the same time, latency grows from 15ms up to 300ms.
> >
> > it is normal because the ping packets are queued behind
> > the other traffic.
> >
> > luigi
> >
> > > Again my conf:
> > > > 5 allow ip from any to any via lo0
> > > > 6 deny ip from any to 127.0.0.0/8
> > > > 7 deny ip from 127.0.0.0/8 to any
> > > > 00011 divert 8668 ip from any to any via ext
> > > > 21046 queue 8 ip from any to 172.20.1.23 in via ext
> > > > 21047 queue 9 ip from 172.20.1.23 to any in via int
> > > > 65535 allow ip from any to any
> > >
> > > Cheers
> > >
> > > Alex
> > >
> > >
> > > -Message d'origine-
> > > De : [EMAIL PROTECTED]
> > > [mailto:[EMAIL PROTECTED] la part de Luigi Rizzo
> > > Envoye : mercredi 29 juin 2005 18:33
> > > A : Alexandre D.
> > > Cc : freebsd-ipfw@freebsd.org
> > > Objet : Re: strange dummynet WFQ problem
> > >
> > >
> > > hi,
> > > when a pipe or queue has a mask of all 0's it only shows the addresses
> > > of the first packet that matched, so you don't have to worry about
> > > that. Also, if queues are linked to the pipe, the accounting is done on
> > > the queues and not on the pipe.
> > >
> > > cheers
> > > luigi
> > >
> > > On Wed, Jun 29, 2005 at 06:27:48PM +0200, Alexandre D. wrote:
> > > > Hi guys
> > > >
> > > > I have a strange problem.
> > > >
> > > > here is a simple sample my conf (hic!):
> > > >
> > > > # ipfw list
> > > > 5 allow ip from any to any via lo0
> > > > 6 deny ip from any to 127.0.0.0/8
> > > > 7 deny ip from 127.0.0.0/8 to any
> > > > 00011 divert 8668 ip from any to any via ext
> > > > 21046 queue 8 ip from any to 172.20.1.23
> > > > 21047 queue 9 ip from 172.20.1.23 to any
> > > > 65535 allow ip from any to any
> > > >
> > > > bash-2.05b# ipfw pipe list
> > > > 1:   1.024 Mbit/s0 ms   50 sl. 0 queues (1 buckets) droptail
> > > > mask: 0x00 0x/0x -> 0x/0x
> > > > 2:   1.024 Mbit/s0 ms   50 sl. 0 queues (1 buckets) droptail
> > > > mask: 0x00 0x/0x -> 0x/0x
> > > > ...
> > > > q8: weight 4 pipe 1   50 sl. 1 queues (1 buckets) droptail
> > > > mask: 0x00 0x/0x -> 0x/0x
> > > > BKT Prot ___Source IP/port Dest. IP/port Tot_pkt/bytes
> > >
> > > Pkt/Byte
> > >
> > > > Drp
> > > >   0 udp   dns address/53   172.20.1.195/3007  1032   254524 
> > > > 0
> > >
> > > 0
> > >
> > > > 0
> > > > q9: weight 4 pipe 2   50 sl. 1 queues (1 buckets) droptail
> > > > mask: 0x00 0x/0x -> 0x/0x
> > > > BKT Prot ___Source IP/port Dest. IP/port Tot_pkt/bytes
> > >
> > > Pkt/Byte
> > >
> > > > Drp
> > > >   0 udp 172.20.1.195/68255.255.255.255/67 58953330  0
> >
> > 0
> >
> > > > 0
> > > >
> > > >
> > > > The thing is that:
> > > > -it looks that datas are going through the corrects queues,
> > > > -each queue is correctly linked to a pipe
> > > > -there is not accounting on both pipes
> > > > -only dns packets are shown by this command.
> > > >
> > > >
> > > > My wonders are:
> > > > -How can I be sure that my queues are correctly linked to the pipes?
> > > > -Why don't I have accounting on the pipes?
> > > > -Why don't I get other than dns packet accounting?
> > > >
> > > > Sorry for the english
> > > >
> > > > Thanks for the answer
> > > >
> > > > Cheers
> > > >
> > > > Alex
> > > >
> > > > ___
> > > > freebsd-ipfw@freebsd.org mailing list
> > > > http://lists.freebsd.org/mailman/listinfo/freebsd-ipfw
> > > > To unsubscribe, send any mail to
> > > > "[EMAIL PROTECTED]"
> > >
> > > ___
> > > freebsd-ipfw@freebsd.org mailing list
> > > http://lists.freebsd.org/mailman/listinfo/freebsd-ipfw
> > > To unsubscribe, send any mail to "[EMAIL PROTECTED]"
>
> ___
> freebsd-ipfw@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-ipfw
> To unsubscribe, send any mail to "[EMAIL PROTECTED]"
>
>
>
>
>
>
>
> A mensagem foi scaneada pelo

Re: strange dummynet WFQ problem

2005-11-20 Thread Luigi Rizzo
On Sun, Nov 20, 2005 at 07:16:40PM +0100, Alexandre DELAY wrote:
> Interresting. I didn't find anythong about that.
> Where can I learn more about this "priorities"?

well, dummynet does not du priorities but weights.
lookup google for "WFQ"
or read the ipfw manpage.

cheers
luigi

> Alex
> 
> 
> -Message d'origine-
> De : Luigi Rizzo [mailto:[EMAIL PROTECTED]
> Envoye : dimanche 20 novembre 2005 19:10
> A : Alexandre DELAY
> Cc : freebsd-ipfw@freebsd.org
> Objet : Re: strange dummynet WFQ problem
> 
> 
> On Sun, Nov 20, 2005 at 07:04:47PM +0100, Alexandre DELAY wrote:
> > It effectively works well, but I still have a problem:
> >
> > When I use my bandwidth (download a huge file) and I start a ping at the
> > same time, latency grows from 15ms up to 300ms.
> 
> it is normal because the ping packets are queued behind
> the other traffic.
> 
> luigi
> 
> > Again my conf:
> >
> > > 5 allow ip from any to any via lo0
> > > 6 deny ip from any to 127.0.0.0/8
> > > 7 deny ip from 127.0.0.0/8 to any
> > > 00011 divert 8668 ip from any to any via ext
> > > 21046 queue 8 ip from any to 172.20.1.23 in via ext
> > > 21047 queue 9 ip from 172.20.1.23 to any in via int
> > > 65535 allow ip from any to any
> >
> >
> > Cheers
> >
> > Alex
> >
> >
> > -Message d'origine-
> > De : [EMAIL PROTECTED]
> > [mailto:[EMAIL PROTECTED] la part de Luigi Rizzo
> > Envoye : mercredi 29 juin 2005 18:33
> > A : Alexandre D.
> > Cc : freebsd-ipfw@freebsd.org
> > Objet : Re: strange dummynet WFQ problem
> >
> >
> > hi,
> > when a pipe or queue has a mask of all 0's it only shows the addresses of
> > the first packet that matched, so you don't have to worry about that.
> > Also, if queues are linked to the pipe, the accounting is done on
> > the queues and not on the pipe.
> >
> > cheers
> > luigi
> >
> > On Wed, Jun 29, 2005 at 06:27:48PM +0200, Alexandre D. wrote:
> > >
> > > Hi guys
> > >
> > > I have a strange problem.
> > >
> > > here is a simple sample my conf (hic!):
> > >
> > > # ipfw list
> > > 5 allow ip from any to any via lo0
> > > 6 deny ip from any to 127.0.0.0/8
> > > 7 deny ip from 127.0.0.0/8 to any
> > > 00011 divert 8668 ip from any to any via ext
> > > 21046 queue 8 ip from any to 172.20.1.23
> > > 21047 queue 9 ip from 172.20.1.23 to any
> > > 65535 allow ip from any to any
> > >
> > > bash-2.05b# ipfw pipe list
> > > 1:   1.024 Mbit/s0 ms   50 sl. 0 queues (1 buckets) droptail
> > > mask: 0x00 0x/0x -> 0x/0x
> > > 2:   1.024 Mbit/s0 ms   50 sl. 0 queues (1 buckets) droptail
> > > mask: 0x00 0x/0x -> 0x/0x
> > > ...
> > > q8: weight 4 pipe 1   50 sl. 1 queues (1 buckets) droptail
> > > mask: 0x00 0x/0x -> 0x/0x
> > > BKT Prot ___Source IP/port Dest. IP/port Tot_pkt/bytes
> > Pkt/Byte
> > > Drp
> > >   0 udp   dns address/53   172.20.1.195/3007  1032   254524  0
> > 0
> > > 0
> > > q9: weight 4 pipe 2   50 sl. 1 queues (1 buckets) droptail
> > > mask: 0x00 0x/0x -> 0x/0x
> > > BKT Prot ___Source IP/port Dest. IP/port Tot_pkt/bytes
> > Pkt/Byte
> > > Drp
> > >   0 udp 172.20.1.195/68255.255.255.255/67 58953330  0
> 0
> > > 0
> > >
> > >
> > > The thing is that:
> > > -it looks that datas are going through the corrects queues,
> > > -each queue is correctly linked to a pipe
> > > -there is not accounting on both pipes
> > > -only dns packets are shown by this command.
> > >
> > >
> > > My wonders are:
> > > -How can I be sure that my queues are correctly linked to the pipes?
> > > -Why don't I have accounting on the pipes?
> > > -Why don't I get other than dns packet accounting?
> > >
> > > Sorry for the english
> > >
> > > Thanks for the answer
> > >
> > > Cheers
> > >
> > > Alex
> > >
> > > ___
> > > freebsd-ipfw@freebsd.org mailing list
> > > http://lists.freebsd.org/mailman/listinfo/freebsd-ipfw
> > > To unsubscribe, send any mail to "[EMAIL PROTECTED]"
> > ___
> > freebsd-ipfw@freebsd.org mailing list
> > http://lists.freebsd.org/mailman/listinfo/freebsd-ipfw
> > To unsubscribe, send any mail to "[EMAIL PROTECTED]"
___
freebsd-ipfw@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-ipfw
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


RE: strange dummynet WFQ problem

2005-11-20 Thread Alexandre DELAY
Interresting. I didn't find anythong about that.
Where can I learn more about this "priorities"?

Alex


-Message d'origine-
De : Luigi Rizzo [mailto:[EMAIL PROTECTED]
Envoye : dimanche 20 novembre 2005 19:10
A : Alexandre DELAY
Cc : freebsd-ipfw@freebsd.org
Objet : Re: strange dummynet WFQ problem


On Sun, Nov 20, 2005 at 07:04:47PM +0100, Alexandre DELAY wrote:
> It effectively works well, but I still have a problem:
>
> When I use my bandwidth (download a huge file) and I start a ping at the
> same time, latency grows from 15ms up to 300ms.

it is normal because the ping packets are queued behind
the other traffic.

luigi

> Again my conf:
>
> > 5 allow ip from any to any via lo0
> > 6 deny ip from any to 127.0.0.0/8
> > 7 deny ip from 127.0.0.0/8 to any
> > 00011 divert 8668 ip from any to any via ext
> > 21046 queue 8 ip from any to 172.20.1.23 in via ext
> > 21047 queue 9 ip from 172.20.1.23 to any in via int
> > 65535 allow ip from any to any
>
>
> Cheers
>
> Alex
>
>
> -Message d'origine-
> De : [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] la part de Luigi Rizzo
> Envoye : mercredi 29 juin 2005 18:33
> A : Alexandre D.
> Cc : freebsd-ipfw@freebsd.org
> Objet : Re: strange dummynet WFQ problem
>
>
> hi,
> when a pipe or queue has a mask of all 0's it only shows the addresses of
> the first packet that matched, so you don't have to worry about that.
> Also, if queues are linked to the pipe, the accounting is done on
> the queues and not on the pipe.
>
> cheers
> luigi
>
> On Wed, Jun 29, 2005 at 06:27:48PM +0200, Alexandre D. wrote:
> >
> > Hi guys
> >
> > I have a strange problem.
> >
> > here is a simple sample my conf (hic!):
> >
> > # ipfw list
> > 5 allow ip from any to any via lo0
> > 6 deny ip from any to 127.0.0.0/8
> > 7 deny ip from 127.0.0.0/8 to any
> > 00011 divert 8668 ip from any to any via ext
> > 21046 queue 8 ip from any to 172.20.1.23
> > 21047 queue 9 ip from 172.20.1.23 to any
> > 65535 allow ip from any to any
> >
> > bash-2.05b# ipfw pipe list
> > 1:   1.024 Mbit/s0 ms   50 sl. 0 queues (1 buckets) droptail
> > mask: 0x00 0x/0x -> 0x/0x
> > 2:   1.024 Mbit/s0 ms   50 sl. 0 queues (1 buckets) droptail
> > mask: 0x00 0x/0x -> 0x/0x
> > ...
> > q8: weight 4 pipe 1   50 sl. 1 queues (1 buckets) droptail
> > mask: 0x00 0x/0x -> 0x/0x
> > BKT Prot ___Source IP/port Dest. IP/port Tot_pkt/bytes
> Pkt/Byte
> > Drp
> >   0 udp   dns address/53   172.20.1.195/3007  1032   254524  0
> 0
> > 0
> > q9: weight 4 pipe 2   50 sl. 1 queues (1 buckets) droptail
> > mask: 0x00 0x/0x -> 0x/0x
> > BKT Prot ___Source IP/port Dest. IP/port Tot_pkt/bytes
> Pkt/Byte
> > Drp
> >   0 udp 172.20.1.195/68255.255.255.255/67 58953330  0
0
> > 0
> >
> >
> > The thing is that:
> > -it looks that datas are going through the corrects queues,
> > -each queue is correctly linked to a pipe
> > -there is not accounting on both pipes
> > -only dns packets are shown by this command.
> >
> >
> > My wonders are:
> > -How can I be sure that my queues are correctly linked to the pipes?
> > -Why don't I have accounting on the pipes?
> > -Why don't I get other than dns packet accounting?
> >
> > Sorry for the english
> >
> > Thanks for the answer
> >
> > Cheers
> >
> > Alex
> >
> > ___
> > freebsd-ipfw@freebsd.org mailing list
> > http://lists.freebsd.org/mailman/listinfo/freebsd-ipfw
> > To unsubscribe, send any mail to "[EMAIL PROTECTED]"
> ___
> freebsd-ipfw@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-ipfw
> To unsubscribe, send any mail to "[EMAIL PROTECTED]"

___
freebsd-ipfw@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-ipfw
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: strange dummynet WFQ problem

2005-11-20 Thread Luigi Rizzo
On Sun, Nov 20, 2005 at 07:04:47PM +0100, Alexandre DELAY wrote:
> It effectively works well, but I still have a problem:
> 
> When I use my bandwidth (download a huge file) and I start a ping at the
> same time, latency grows from 15ms up to 300ms.

it is normal because the ping packets are queued behind
the other traffic.

luigi

> Again my conf:
> 
> > 5 allow ip from any to any via lo0
> > 6 deny ip from any to 127.0.0.0/8
> > 7 deny ip from 127.0.0.0/8 to any
> > 00011 divert 8668 ip from any to any via ext
> > 21046 queue 8 ip from any to 172.20.1.23 in via ext
> > 21047 queue 9 ip from 172.20.1.23 to any in via int
> > 65535 allow ip from any to any
> 
> 
> Cheers
> 
> Alex
> 
> 
> -Message d'origine-
> De : [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] la part de Luigi Rizzo
> Envoye : mercredi 29 juin 2005 18:33
> A : Alexandre D.
> Cc : freebsd-ipfw@freebsd.org
> Objet : Re: strange dummynet WFQ problem
> 
> 
> hi,
> when a pipe or queue has a mask of all 0's it only shows the addresses of
> the first packet that matched, so you don't have to worry about that.
> Also, if queues are linked to the pipe, the accounting is done on
> the queues and not on the pipe.
> 
> cheers
> luigi
> 
> On Wed, Jun 29, 2005 at 06:27:48PM +0200, Alexandre D. wrote:
> >
> > Hi guys
> >
> > I have a strange problem.
> >
> > here is a simple sample my conf (hic!):
> >
> > # ipfw list
> > 5 allow ip from any to any via lo0
> > 6 deny ip from any to 127.0.0.0/8
> > 7 deny ip from 127.0.0.0/8 to any
> > 00011 divert 8668 ip from any to any via ext
> > 21046 queue 8 ip from any to 172.20.1.23
> > 21047 queue 9 ip from 172.20.1.23 to any
> > 65535 allow ip from any to any
> >
> > bash-2.05b# ipfw pipe list
> > 1:   1.024 Mbit/s0 ms   50 sl. 0 queues (1 buckets) droptail
> > mask: 0x00 0x/0x -> 0x/0x
> > 2:   1.024 Mbit/s0 ms   50 sl. 0 queues (1 buckets) droptail
> > mask: 0x00 0x/0x -> 0x/0x
> > ...
> > q8: weight 4 pipe 1   50 sl. 1 queues (1 buckets) droptail
> > mask: 0x00 0x/0x -> 0x/0x
> > BKT Prot ___Source IP/port Dest. IP/port Tot_pkt/bytes
> Pkt/Byte
> > Drp
> >   0 udp   dns address/53   172.20.1.195/3007  1032   254524  0
> 0
> > 0
> > q9: weight 4 pipe 2   50 sl. 1 queues (1 buckets) droptail
> > mask: 0x00 0x/0x -> 0x/0x
> > BKT Prot ___Source IP/port Dest. IP/port Tot_pkt/bytes
> Pkt/Byte
> > Drp
> >   0 udp 172.20.1.195/68255.255.255.255/67 58953330  00
> > 0
> >
> >
> > The thing is that:
> > -it looks that datas are going through the corrects queues,
> > -each queue is correctly linked to a pipe
> > -there is not accounting on both pipes
> > -only dns packets are shown by this command.
> >
> >
> > My wonders are:
> > -How can I be sure that my queues are correctly linked to the pipes?
> > -Why don't I have accounting on the pipes?
> > -Why don't I get other than dns packet accounting?
> >
> > Sorry for the english
> >
> > Thanks for the answer
> >
> > Cheers
> >
> > Alex
> >
> > ___
> > freebsd-ipfw@freebsd.org mailing list
> > http://lists.freebsd.org/mailman/listinfo/freebsd-ipfw
> > To unsubscribe, send any mail to "[EMAIL PROTECTED]"
> ___
> freebsd-ipfw@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-ipfw
> To unsubscribe, send any mail to "[EMAIL PROTECTED]"
___
freebsd-ipfw@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-ipfw
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


RE: strange dummynet WFQ problem

2005-11-20 Thread Alexandre DELAY
It effectively works well, but I still have a problem:

When I use my bandwidth (download a huge file) and I start a ping at the
same time, latency grows from 15ms up to 300ms.
Again my conf:

> 5 allow ip from any to any via lo0
> 6 deny ip from any to 127.0.0.0/8
> 7 deny ip from 127.0.0.0/8 to any
> 00011 divert 8668 ip from any to any via ext
> 21046 queue 8 ip from any to 172.20.1.23 in via ext
> 21047 queue 9 ip from 172.20.1.23 to any in via int
> 65535 allow ip from any to any


Cheers

Alex


-Message d'origine-
De : [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] la part de Luigi Rizzo
Envoye : mercredi 29 juin 2005 18:33
A : Alexandre D.
Cc : freebsd-ipfw@freebsd.org
Objet : Re: strange dummynet WFQ problem


hi,
when a pipe or queue has a mask of all 0's it only shows the addresses of
the first packet that matched, so you don't have to worry about that.
Also, if queues are linked to the pipe, the accounting is done on
the queues and not on the pipe.

cheers
luigi

On Wed, Jun 29, 2005 at 06:27:48PM +0200, Alexandre D. wrote:
>
> Hi guys
>
> I have a strange problem.
>
> here is a simple sample my conf (hic!):
>
> # ipfw list
> 5 allow ip from any to any via lo0
> 6 deny ip from any to 127.0.0.0/8
> 7 deny ip from 127.0.0.0/8 to any
> 00011 divert 8668 ip from any to any via ext
> 21046 queue 8 ip from any to 172.20.1.23
> 21047 queue 9 ip from 172.20.1.23 to any
> 65535 allow ip from any to any
>
> bash-2.05b# ipfw pipe list
> 1:   1.024 Mbit/s0 ms   50 sl. 0 queues (1 buckets) droptail
> mask: 0x00 0x/0x -> 0x/0x
> 2:   1.024 Mbit/s0 ms   50 sl. 0 queues (1 buckets) droptail
> mask: 0x00 0x/0x -> 0x/0x
> ...
> q8: weight 4 pipe 1   50 sl. 1 queues (1 buckets) droptail
> mask: 0x00 0x/0x -> 0x/0x
> BKT Prot ___Source IP/port Dest. IP/port Tot_pkt/bytes
Pkt/Byte
> Drp
>   0 udp   dns address/53   172.20.1.195/3007  1032   254524  0
0
> 0
> q9: weight 4 pipe 2   50 sl. 1 queues (1 buckets) droptail
> mask: 0x00 0x/0x -> 0x/0x
> BKT Prot ___Source IP/port Dest. IP/port Tot_pkt/bytes
Pkt/Byte
> Drp
>   0 udp 172.20.1.195/68255.255.255.255/67 58953330  00
> 0
>
>
> The thing is that:
> -it looks that datas are going through the corrects queues,
> -each queue is correctly linked to a pipe
> -there is not accounting on both pipes
> -only dns packets are shown by this command.
>
>
> My wonders are:
> -How can I be sure that my queues are correctly linked to the pipes?
> -Why don't I have accounting on the pipes?
> -Why don't I get other than dns packet accounting?
>
> Sorry for the english
>
> Thanks for the answer
>
> Cheers
>
> Alex
>
> ___
> freebsd-ipfw@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-ipfw
> To unsubscribe, send any mail to "[EMAIL PROTECTED]"
___
freebsd-ipfw@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-ipfw
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

___
freebsd-ipfw@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-ipfw
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


FreeBSD 6.0 - ipfw fwd with bridge mode

2005-11-20 Thread Özkan KIRIK

Hi,

i am trying to forward packets via ipfw in bridge mode.
is there any patch for 6.0-Release?

thanks for your interests,
___
freebsd-ipfw@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-ipfw
To unsubscribe, send any mail to "[EMAIL PROTECTED]"