From owner-freebsd-ipfw@FreeBSD.ORG Tue Jan 2 01:45:17 2007 Return-Path: X-Original-To: freebsd-ipfw@freebsd.org Delivered-To: freebsd-ipfw@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id CB08816A407 for ; Tue, 2 Jan 2007 01:45:17 +0000 (UTC) (envelope-from user@dhp.com) Received: from shell.dhp.com (shell.dhp.com [199.4.150.5]) by mx1.freebsd.org (Postfix) with ESMTP id A556913C441 for ; Tue, 2 Jan 2007 01:45:17 +0000 (UTC) (envelope-from user@dhp.com) Received: by shell.dhp.com (Postfix, from userid 896) id E42C6263D1; Mon, 1 Jan 2007 20:45:12 -0500 (EST) Date: Mon, 1 Jan 2007 20:45:12 -0500 (EST) From: Ensel Sharon To: "Tobias P. Santos" In-Reply-To: <4599B00B.8000307@netconsultoria.com.br> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Cc: freebsd-ipfw@freebsd.org Subject: Re: lowercase 'm' with dummynet rate limiting ? Known issue ? X-BeenThere: freebsd-ipfw@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: IPFW Technical Discussions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 02 Jan 2007 01:45:17 -0000 On Mon, 1 Jan 2007, Tobias P. Santos wrote: > Ensel Sharon escreveu: > [...] > > ipfw pipe 1 config bw 10mbit/s > > > > Oops. After about 5 minutes, the prompt returns, so it's not like a > > normal accidental-ipfw-lockout (when those happen you never see the prompt > > again). But it might as well be, because that was the last response I got > > out of that system - can't ping it, can't connect, and both ssh sessions > > timed out trying to get a prompt back. > > > > So what did I do wrong ? I see that the man page calls for a uppercase M > > (10Mbits/s) whereas I typed a lowercase 'm'. Was that the problem ? Or > > was I supposed to remove the first pipe completely before reissuing the > > 'ipfw pipe 1 config' command again ? > > > > Any idea why that command took it off line ? > > Similar issue: > http://lists.freebsd.org/pipermail/freebsd-net/2006-November/012566.html Ahh... so unless I am missing something, it would appear that when you put a lowercase-m in place, it is just skipped, and: ipfw pipe 1 config bw 10mbit/s becomes: ipfw pipe 1 config bw 10bit/s Does that look like an accurate interpretation of what is happening ? So here's a follow-up question: I now have a (remote) system that is now set to 10bit/s rate limiting ... now that is awfully slow, but are there any conceivable tcp/ip settings that I could apply on a local system here that would allow me to ssh into it ? As it stands now, I cannot ssh into it - the session times out. Any ideas ? All I need to do is login and "ipfw delete ..." :)