Re: route selection and ipfw forwarding

2006-01-02 Thread G Bryant
Dennis Olvany wrote: What does your setup look like? Don't have a setup, yet. In lieu of such complexity, I may abandon the notion. Start of IPFW rules file ### End of IPFW rules file ###

Re: route selection and ipfw forwarding

2006-01-02 Thread G Bryant
AT Matik wrote: On Monday 02 January 2006 11:12, G Bryant wrote: I used the different groups (e.g. $u512k) to split the internal IP range into IP groups that get different bandwidth according to personal preference or whatever. Currently it is not being used as the whole range is being

Re: route selection and ipfw forwarding

2006-01-02 Thread G Bryant
AT Matik wrote: On Monday 02 January 2006 07:15, G Bryant wrote: # Users with 512Kb / 256Kb access (in) $cmd 4200 pipe 10 ip from any to $u512k in via $ext_if1 $bwm 10 config mask dst-ip 0x00ff bw 512Kbit/s queue 4KBytes # Users with 256Kb / 128Kb access $cmd pipe 20 ip from any to

Re: route selection and ipfw forwarding

2006-01-02 Thread G Bryant
AT Matik wrote: On Monday 02 January 2006 07:15, G Bryant wrote: # Users with 512Kb / 256Kb access (in) $cmd 4200 pipe 10 ip from any to $u512k in via $ext_if1 $bwm 10 config mask dst-ip 0x00ff bw 512Kbit/s queue 4KBytes # Users with 256Kb / 128Kb access $cmd pipe 20 ip from any to

Re: route selection and ipfw forwarding

2006-01-02 Thread G Bryant
Dennis Olvany wrote: It is possible to do load sharing, but not balancing in the true sense of the word. You need to use ipfw's FWD rule to forward (push) packets to the different gateways of the 4 WAN links, but it get's a bit more complicated from there. To do this using forwarding to

Re: route selection and ipfw forwarding

2006-01-01 Thread G Bryant
Dennis Olvany wrote: Let's say that I wanted to balance upstream traffic across four WAN links to the same ISP and default gateway using IPFW probabilities. Can the FreeBSD routing table contain multiple routes to the same destination? How would a route be selected and could such a selection b

Re: Load Balancing Outgoing, its possible ?

2005-10-31 Thread G Bryant
Rob Viau wrote: On Fri, 2005-10-28 at 17:19 +0200, G Bryant wrote: Daniel Dias Gonçalves wrote: It is possible to make this balancing with the PF ? Exists some software that I make this ? Zebra can help me? This type of balancing gives to problems with the navigation of the

Re: Load Balancing Outgoing, its possible ?

2005-10-28 Thread G Bryant
Daniel Dias Gonçalves wrote: G Bryant escreveu: Daniel Dias Gonçalves wrote: Complicated ? Its possible ? TELECOM LOAD SHARING PER PACKET

Re: Load Balancing Outgoing, its possible ?

2005-10-28 Thread G Bryant
Daniel Dias Gonçalves wrote: Complicated ? Its possible ? TELECOM LOAD SHARING PER PACKET -- | | |

Re: ipfw firewall help

2005-10-23 Thread G Bryant
work range # ${fwcmd} add deny ip from ${iif} to any in via ${oif} # Stop spoofing from inside your private ip range # ${fwcmd} add deny ip from not ${iif} to any in via ${iif} G Bryant wrote: Hi, I found my rules worked best in this order: (You will need to correct the syntax - just typed up

Re: ipfw firewall help

2005-10-20 Thread G Bryant
Hi, I found my rules worked best in this order: (You will need to correct the syntax - just typed up the order for you quickly) Deny spoofed Allow localhost Allow all from any to any via $iif divert natd all from any to any in via $oif #insert bandwidth shaping rules skipto 5000 all from $iip t

2 uplinks with bandwidth management, load splitting and fail-over. Working

2005-10-06 Thread G Bryant
Greetings, 2 uplinks with bandwidth management, load splitting and fail-over. Working For those interested in an alternate method of doing the same thing - here are some basics. You could probably modify the script rules and sets to do crude load balancing between the lines too - but more of tha

Re: alias ip and natd with ipfw fwd

2005-10-01 Thread G Bryant
# ifconfig -a rl0: flags=8843 mtu 1500 options=8 inet 192.168.8.70 netmask 0xff00 broadcast 192.168.8.255 inet 192.168.0.99 netmask 0xff00 broadcast 192.168.0.255 ether 00:11:95:5a:e2:da media: Ethernet autoselect (100baseTX ) status: active

alias ip and natd with ipfw fwd

2005-10-01 Thread G Bryant
Not sure if previous posts came through, so please forgive if this is a repeat. Can anybody please help with problem. Using natd and ipfw and trying to fwd packets to a non-default router out the same interface. Currently using alias for the second ip, but it doesn't seem to be working for som

fwd: alias vs clone

2005-09-30 Thread G Bryant
Anybody help with difference between ifconfig: clone or alias? Trying to ipfw fwd packets to non-default router out the same interface. Currently using alias, but not working for some unexplainable reason. Would clone work? Thanks Graham ___ freebsd-i

Re: Enable ipfw without rebooting

2005-09-23 Thread G Bryant
You could use ipfw sets and disable the sets at the start of the script - excluding the pass-thru rules. My rc.firewall script disables all the scripts and only enables the ones I want. I can then run scripts from cron to enable/ disable any sets I like. You can load all the rules you want int

natd2, fwd GW2 - not reaching destination correctly?

2005-09-22 Thread G Bryant
Hi all, I have a problem i'm trying to figure out with FreeBSD5.4, natd and ipfw fwd command. Have a box acting as a gateway with relevant kernel options compiled in. External NIC with inet x.y.1.10 and inet x.y.2.10 alias (I also tried using 2 seperate NIC's with the above 2 ip's, but no joy

Re: multiple incoming lines

2005-09-20 Thread G Bryant
Thanks for the help. I am trying to do load-balancing using 2 ISP's. Mostly traffic from the LAN. I will look at possible routing, but don't see how I can manipulate outgoing packets to split the outgoing load between the two external NIC's. Anybody done this before? Thanks Gray vladone wrot

multiple incoming lines

2005-09-20 Thread G Bryant
Hi all, I hope someone can help me with a routing / Natd / ipfw problem i'm having. Setup description: 1x FreeBSD 5.4 3x NIC's: 1x LAN, 2x connected to external DSL modems int_if - LAN ext_if1 - ISP1 ext_if2 - ISP2 Both dsl modems use NAT too, so it is a nat - nat, but did have it working for a