Date: Mon, 28 Nov 2011 23:36:39 +0100 From: Marek Salwerowicz <marek_sal@wp.pl> To: Freddie Cash <fjwcash@gmail.com>, freebsd-net@freebsd.org Subject: Re: ipfw - accessing DMZ from LAN , pipes Message-ID: <4ED40CF7.2040005@wp.pl> In-Reply-To: <CAOjFWZ7LV3z=22mPLXw-T0W6dJCfVVZ9Q%2Bd%2BKxg1VFdM51eLww@mail.gmail.com> References: <4E412116.1070305@wp.pl> <CAOjFWZ4B3uUfOLAzL=B1WY98rqi6X32j7FM61VjJ3td76NkADg@mail.gmail.com> <4E422A74.3090601@wp.pl> <CAOjFWZ5CK62nQMA8JsfW1b4BQh3hAJbAAynortzaUBqSWBwdSQ@mail.gmail.com> <4E7B450F.5050802@wp.pl> <CAOjFWZ6wf9NnVeffUV4uA6h1t-1T8juxXycZbM7%2BGgpFC-HkUg@mail.gmail.com> <4E84B447.7010509@wp.pl> <CAOjFWZ4XOU2dT3%2BL6AJeUNO7QcC=0ymLXN3GMkzCuoB3a1Qyew@mail.gmail.com> <4E84DE26.6030103@misal.pl> <4E85D8CB.6010104@wp.pl> <CAOjFWZ6xZ5bDcm6aAVvwz47rmYLEqSyKO5Bzg3aQPHS-o98w_w@mail.gmail.com> <4E876705.3040806@wp.pl> <CAOjFWZ7LV3z=22mPLXw-T0W6dJCfVVZ9Q%2Bd%2BKxg1VFdM51eLww@mail.gmail.com>
next in thread | previous in thread | raw e-mail | index | archive | help
Hello after a longer break ;) W dniu 2011-10-01 22:02, Freddie Cash pisze: > > > However, you could setup split-DNS or views and just configure everything to > connect using hostnames. It's extra work to setup, but does make things > easier down-the-road. I've set up the DNS with views and since one month everything has been working perfectly (I set up the firewall at small net5501 soekris box) - thanks a lot for your help ! I am confused about one thing - I wanted to set up pipes for my DMZ hosts (not to allow my hosts to consume all the bandwidth). When I set up the pipes at the beginning of my firewall (before configuring the NAT) - the whole traffic is blocked. When I set up the pipes ad the end of firewall - they don't work (even 'ipfw show' shows no packets coming through 'pipe' rules). Where should be the pipe rules placed? Does it matter if I do first 'ipfw add pipe 1...' and then 'ipfw pipe 1 config...' ? Regards, -- Marek Salwerowicz
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?4ED40CF7.2040005>