Date: Sat, 8 Jul 2006 19:50:05 +0200 From: "Simon L. Nielsen" <simon@FreeBSD.org> To: Scott Ullrich <sullrich@gmail.com> Cc: freebsd-net@freebsd.org, Andre Santos <andre.netvision.com.br@gmail.com> Subject: Re: Incompatibility between dummynet and PF rdr. Message-ID: <20060708175004.GA1087@zaphod.nitro.dk> In-Reply-To: <d5992baf0607081024kab08328xaf425cafb5c0a3bd@mail.gmail.com> References: <efb1abb0607080657o3f1959b7v96626c8869c4d714@mail.gmail.com> <d5992baf0607081024kab08328xaf425cafb5c0a3bd@mail.gmail.com>
next in thread | previous in thread | raw e-mail | index | archive | help
--u3/rZRmxL6MmkK24 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On 2006.07.08 13:24:41 -0400, Scott Ullrich wrote: > On 7/8/06, Andre Santos <andre.netvision.com.br@gmail.com> wrote: > >Are there any known compatibility problems between dummynet and PF rdr= =20 > >rules? > >When I try to combine both, the packets seem to simply disappear. > [snip] >=20 > I can confirm this behavior. Glad someone else noticed as it would > happen when we try to use dummynet traffic shaping + pf on pfSense. > Never really was a high priority to nail down exactly what combination > of dummynet + pf was breaking it. If anyone needs me to test > patches, just let me know. I also noticed problems when trying to use dummynet/ipfw and pf. I looked a bit at it and it seemed that packets, which got queued in dummynet, were not matched by pf's state engine when re-injected from dummynet. At least I saw a lot of denied packets which shouldn't have been denied on pflog. It wasn't very important for me to get this working, so I haven't looked more at it. --=20 Simon L. Nielsen --u3/rZRmxL6MmkK24 Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.4 (FreeBSD) iD8DBQFEr/BMh9pcDSc1mlERAj/mAKCiXmpxalcY9HrG7dEguA9TGnPdJwCfaaql y4frc2I09ZAkRY8GicaZmSI= =hdpI -----END PGP SIGNATURE----- --u3/rZRmxL6MmkK24--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20060708175004.GA1087>