From owner-freebsd-current@FreeBSD.ORG  Mon Nov  1 12:20:14 2004
Return-Path: <owner-freebsd-current@FreeBSD.ORG>
Delivered-To: freebsd-current@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP
	id CCD9E16A4CE; Mon,  1 Nov 2004 12:20:14 +0000 (GMT)
Received: from poison2.syncrontech.com (adsl-nat.syncrontech.com
	[213.28.98.3])	by mx1.FreeBSD.org (Postfix) with ESMTP
	id 5F09943D1F; Mon,  1 Nov 2004 12:20:13 +0000 (GMT)
	(envelope-from ari@suutari.iki.fi)
Received: from guinness.syncrontech.com (guinness.syncrontech.com
	[62.71.8.57])iA1CK8L6030602;	Mon, 1 Nov 2004 14:20:09 +0200 (EET)
	(envelope-from ari@suutari.iki.fi)
Received: from coffee (coffee.syncrontech.com [62.71.8.37])
	iA1CK7b2043496;	Mon, 1 Nov 2004 14:20:07 +0200 (EET)
	(envelope-from ari@suutari.iki.fi)
Message-ID: <02d801c4c00d$24fc2a30$2508473e@sad.syncrontech.com>
From: "Ari Suutari" <ari@suutari.iki.fi>
To: "Vincent Poy" <vincepoy@gmail.com>
References: <200410300927.51286.ari@suutari.iki.fi>
	<429af92e04103118435b35f235@mail.gmail.com>
	<016901c4bfe5$77c19d90$2508473e@sad.syncrontech.com>
	<429af92e041101021638e8598e@mail.gmail.com>
Date: Mon, 1 Nov 2004 14:20:10 +0200
MIME-Version: 1.0
Content-Type: text/plain;
	format=flowed;
	charset="iso-8859-1";
	reply-type=original
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2900.2180
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
cc: freebsd-net@freebsd.org
cc: freebsd-current@freebsd.org
cc: Andre Oppermann <andre@freebsd.org>
cc: freebsd-ipfw@freebsd.org
Subject: Re: ipfw and ipsec processing order for outgoing packets wrong
X-BeenThere: freebsd-current@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Discussions about the use of FreeBSD-current
	<freebsd-current.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-current>,
	<mailto:freebsd-current-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-current>
List-Post: <mailto:freebsd-current@freebsd.org>
List-Help: <mailto:freebsd-current-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-current>,
	<mailto:freebsd-current-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Mon, 01 Nov 2004 12:20:14 -0000

Hi,
> The counters for queue 1 keeps increasing when I do a ftp out even for
> non-ACK packets but the other counters for queue 2-4 doesn't move at
> all so it seems like everything is going out one queue instead of what
> the rules actually say.  I have one pipe configured as 480Kbit/sec
> which is what rules 63005-63008 does.

    Are you using IPsec ?

        Ari S.