From owner-freebsd-questions Mon Nov 26 23:58:44 2001 Delivered-To: freebsd-questions@freebsd.org Received: from scaup.prod.itd.earthlink.net (scaup.mail.pas.earthlink.net [207.217.120.49]) by hub.freebsd.org (Postfix) with ESMTP id A8DD337B417 for ; Mon, 26 Nov 2001 23:58:34 -0800 (PST) Received: from user-2ivfo8b.dialup.mindspring.com ([165.247.225.11] helo=gohan.cjclark.org) by scaup.prod.itd.earthlink.net with esmtp (Exim 3.33 #1) id 168d8S-0005Gn-00; Mon, 26 Nov 2001 23:58:33 -0800 Received: (from cjc@localhost) by gohan.cjclark.org (8.11.6/8.11.1) id fAR0mff00633; Mon, 26 Nov 2001 16:48:41 -0800 (PST) (envelope-from cjc) Date: Mon, 26 Nov 2001 16:48:41 -0800 From: "Crist J. Clark" To: =?iso-8859-1?Q?Radek_V=E1clav=EDk?= Cc: freebsd-questions@FreeBSD.ORG Subject: Re: IPFW rules Message-ID: <20011126164841.B418@gohan.cjclark.org> Reply-To: cjclark@alum.mit.edu References: <013301c176cd$bd523860$fd6c2093@arvi> Mime-Version: 1.0 Content-Type: text/plain; charset=iso-8859-1 Content-Disposition: inline Content-Transfer-Encoding: 8bit User-Agent: Mutt/1.2.5i In-Reply-To: <013301c176cd$bd523860$fd6c2093@arvi>; from radekvaclavik@yahoo.com on Mon, Nov 26, 2001 at 11:57:34PM +0100 X-URL: http://people.freebsd.org/~cjc/ Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG On Mon, Nov 26, 2001 at 11:57:34PM +0100, Radek Václavík wrote: [snip] > My problem is this one: I have a network, which has a relatively slow > connection out to the world. And due to a lots of ftp traffic, other > services (like ssh, telnet, vnc..etc) are getting very slow because of high > ping and packet loss. Therefore, I would like to set priority to packets at > different ports (for the firewall to handle these packets prior to the other > ones - like ftp). And this is it. How to create rule for this? > I don't want to strictly restrict the bandwitch for ftp (to have full use of > the line for ftp when not using the other services). And even if I'd decide > to do so (rules for this work fine), I don't know, what ports to restrict > ( 2o only doesn't work, cause a lot of users download from different ftp > ports). Look at dummynet(4) and 'pipe' rules in ipfw(8). But catching the ftp data connections with the rules is non-trivial. I do not believe that there is any simple functionality for this built into any tools. -- Crist J. Clark cjclark@alum.mit.edu To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message