Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 30 Jul 2004 10:33:46 -0700
From:      Charlie Schluting <charlie@schluting.com>
To:        freebsd-net@freebsd.org
Subject:   Re: packet order, ipf or ipfw
Message-ID:  <410A867A.6000707@schluting.com>
In-Reply-To: <20040730191015.W483-100000@prophet.alphaque.com>
References:  <20040730191015.W483-100000@prophet.alphaque.com>

next in thread | previous in thread | raw e-mail | index | archive | help
Dinesh Nair wrote:
> by default the flow is:
> 
> wire -> ipnat -> ipfilter -> ipfw -> kernel -> ipfilter -> ipnat ->ipfw
> 
> the patch in the above PR changes it to:
> 
> wire -> ipnat -> ipfilter -> ipfw -> kernel -> ipfw -> ipfilter -> ipnat

Interesting! Thanks for all the great info guys.

I don't really need to use the patch, since I simply want to limit my 
outbound bandwidth usage.

The problem with my rules before was a result of not understanding that 
nat translation had already taken place (I think). I'll test this weekend.

Thanks;
-Charlie



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?410A867A.6000707>