Date: Tue, 12 Aug 2008 14:29:25 +0200 From: "Adrian Penisoara" <ady@freebsd.ady.ro> To: "Fred Portnoy" <fportnoy@mail.plymouth.edu> Cc: freebsd-ipfw <freebsd-ipfw@freebsd.org> Subject: Re: ipv4 diffserv entry Message-ID: <78cb3d3f0808120529i29408660v43b6430179b4fd47@mail.gmail.com> In-Reply-To: <666535032.311481218543743824.JavaMail.root@cygnus.plymouth.edu> References: <1837587044.311191218543618034.JavaMail.root@cygnus.plymouth.edu> <666535032.311481218543743824.JavaMail.root@cygnus.plymouth.edu>
next in thread | previous in thread | raw e-mail | index | archive | help
Hi, On Tue, Aug 12, 2008 at 2:22 PM, Fred Portnoy <fportnoy@mail.plymouth.edu> wrote: > First question, ipfw on FreeBSD 5.4-RELEASE. Other questions are more difficult, since we're dealing with a production network.... Are you able to setup a test environment with the same FreeBSD release and configuration and to reproduce the issue ? It would be a good start to make these tests. Regards, Adrian. > > thanks > > Fred Portnoy > Network Analyst > Plymouth State University > > "unfettered by edgy modernisms, or classical influences" > > ----- Original Message ----- > From: "Adrian Penisoara" <ady@freebsd.ady.ro> > To: "Fred Portnoy" <fportnoy@mail.plymouth.edu> > Cc: "freebsd-ipfw" <freebsd-ipfw@freebsd.org> > Sent: Tuesday, August 12, 2008 7:21:45 AM GMT -05:00 US/Canada Eastern > Subject: Re: ipv4 diffserv entry > > Hi, > > On Mon, Aug 11, 2008 at 10:30 PM, Fred Portnoy > <fportnoy@mail.plymouth.edu> wrote: >> By using Sniffer and tcpdump together, it appears that the entry in the "TOS" field of the IPv4 header is getting stripped off as the packet leaves the external facing interface of the firewall. Is this known behavior? Is there a way to preserve the TOS? > > Which firewall framework are we talking about (ipfw / pf / ipf) ? > Does it reproduce with all/other firewalls ? > If you completely disable the firewall, does the issue stop reproducing ? > > Regards, > Adrian. >
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?78cb3d3f0808120529i29408660v43b6430179b4fd47>