Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 12 Sep 2006 22:49:07 +0300
From:      Odhiambo Washington <wash@wananchi.com>
To:        freebsd-questions@freebsd.org
Subject:   ipfw - bandwidth throttling (sanity check!)
Message-ID:  <20060912194907.GA44560@ns2.wananchi.com>

next in thread | raw e-mail | index | archive | help
Hello Security guy ;)

I have tried very hard to understand ipfw just for the purpose of
bandwidth throttling for smtp service.

Basically, I want to throttle the bandwidth used by my SMTP
server outbound to _anyone_ else except my ip blocks.

My Server is 1.2.3.4 and my ip blocks are a.b.c.d/19 and
e.f.g.h/20


Are the following rules sane enough?

        ipfw pipe 1 config bw 256Kbit/s
        ipfw add pipe 1 tcp from 1.2.3.4 to not a.b.c.d/19 25
        ipfw add pipe 1 tcp from 1.2.3.4 to not e.f.g.h/20 25


Any smtp traffic not to these netblocks should be throttled.
By that, I am thinking it will match everything smtp outbound
only, not inbound.


Thank you for your time.


-Wash

http://www.netmeister.org/news/learn2quote.html

DISCLAIMER: See http://www.wananchi.com/bms/terms.php

--
+======================================================================+
    |\      _,,,---,,_     | Odhiambo Washington    <wash@wananchi.com>
Zzz /,`.-'`'    -.  ;-;;,_ | Wananchi Online Ltd.   www.wananchi.com
   |,4-  ) )-,_. ,\ (  `'-'| Tel: +254 20 313985-9  +254 20 313922
  '---''(_/--'  `-'\_)     | GSM: +254 722 743223   +254 733 744121
+======================================================================+

Don't put off for tomorrow what you can do today, because if you enjoy
it today you can do it again tomorrow.



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20060912194907.GA44560>