From owner-freebsd-net@FreeBSD.ORG Sun Aug 28 21:07:09 2011 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 237531065672 for ; Sun, 28 Aug 2011 21:07:09 +0000 (UTC) (envelope-from fredan-freebsd@fredan.se) Received: from mail.fredan.se (mail.fredan.se [77.105.235.102]) by mx1.freebsd.org (Postfix) with ESMTP id DEAB58FC0A for ; Sun, 28 Aug 2011 21:07:08 +0000 (UTC) Received: from [2a03:b000:c04e:10:a075:3eff:fe10:2e3e] (port=56620 helo=fredan-pc.localnet) by mail.fredan.se with esmtpsa (TLSv1:DHE-RSA-AES256-SHA:256) (Exim 4.71) (envelope-from ) id 1QxmWM-0007At-P0 for freebsd-net@freebsd.org; Sun, 28 Aug 2011 23:03:58 +0200 From: fredrik danerklint Organization: fredan To: freebsd-net@freebsd.org Date: Sun, 28 Aug 2011 23:03:57 +0200 User-Agent: KMail/1.13.6 (Linux/2.6.38-11-generic; KDE/4.6.2; x86_64; ; ) References: <201108282216.47501.fredan-freebsd@fredan.se> In-Reply-To: <201108282216.47501.fredan-freebsd@fredan.se> MIME-Version: 1.0 Content-Type: Text/Plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit Message-Id: <201108282303.58169.fredan-freebsd@fredan.se> Subject: Re: Dummynet, pipe and ip6 X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 28 Aug 2011 21:07:09 -0000 > Hi! > > firewall_enable="YES" > firewall_type="/etc/rc.firewall.local" > > pipe 1 config bw 1Mbit/s > add 50091 pipe 1 ip from any to any via igb4 > add 65000 allow ip from any to any > > When pinging the interface igb4 on the ip4 address it does work. > When pinging the interface igb4 on the ip6 address it doesn't work. > > To get the ip6 address to respond at all I had to add: > > sysctl net.inet.ip.fw.one_pass=0 > > Why? > > Does the pipe really work with ip6 traffic in this configuration? Have to add that pinging the other side of the interface does not work even with the sysctl setting.... -- //fredan