Date: Tue, 06 Feb 2007 16:27:11 -0800 From: Justin Robertson <justin@sk1llz.net> To: freebsd-net@freebsd.org Subject: Re: 6.x, 4.x ipfw/dummynet pf/altq - network performance issues Message-ID: <45C91CDF.7000509@sk1llz.net> In-Reply-To: <45C8EC53.8020803@elischer.org> References: <45C8E2A2.9040204@sk1llz.net> <45C8EC53.8020803@elischer.org>
next in thread | previous in thread | raw e-mail | index | archive | help
Err, forgot to reply to -net, at anyrate, layer 2 isn't useful as it doesn't undertand ip addresses, ports, protocols, etc. Julian Elischer wrote: > Justin Robertson wrote: >> > > > >> Splitting the task into a transparent filtering bridge with a >> separate routing box appears to clear it up entirely. > > how does that differ from using mac level ipfw? > > i.e. turning on filtering at the NIC (layer 2). > > (have you tried doing that?) >
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?45C91CDF.7000509>