Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 13 Apr 2004 18:53:21 +0200 (CEST)
From:      Ludo Koren <lk@tempest.sk>
To:        rizzo@icir.org
Cc:        ipfw@freebsd.org
Subject:   Re: limiting bandwith
Message-ID:  <200404131653.i3DGrLb7057734@lk106.tempest.sk>
In-Reply-To: <20040413091734.A98975@xorpc.icir.org> (message from Luigi Rizzo on Tue, 13 Apr 2004 09:17:34 -0700)

Next in thread | Previous in thread | Raw E-Mail | Index | Archive | Help


     > i think it is pilot error.

I do not argue. yes, it probably is.

     > Be warned that dynamic rules only match addresses and ports, so
     > once a rule is installed it will match traffic both in and out.
     > If you want to select on other attributes you have to do it
     > before you hit any keep-state or check-state rule.

     > I don't know if it matches recent reports about dummynet on
     > 5.2.1 giving half the bandwidth, but i just checked locally and
     > it does work as expected -- the bandwidth is correct (with a
     > correct ipfw config, that is :)

I just cannot put together rules, that do what I want. If I omit
keep-state from the rule:

add pipe 20 tcp from B to A dst-port 25 out xmit xl1 keep-state

it stops working. Basically, I am lost...

     > 	cheers luigi

lk



Want to link to this message? Use this URL: <http://docs.FreeBSD.org/cgi/mid.cgi?200404131653.i3DGrLb7057734>