Date: Sun, 15 Aug 2004 21:53:49 +0200 From: Colin Alston <karnaugh@karnaugh.za.net> To: Fargo Holiday <galaxy.ranger@gmail.com> Cc: freebsd-net@freebsd.org Subject: Re: [FreeBSD 5.2] Bandwith and packet throttling Message-ID: <411FBF4D.9090706@karnaugh.za.net> In-Reply-To: <4a1299a4040815113178caa332@mail.gmail.com> References: <4a1299a404081414287a9ecbc@mail.gmail.com> <20040815104243.GA43915@shellma.zin.lublin.pl> <4a1299a4040815113178caa332@mail.gmail.com>
next in thread | previous in thread | raw e-mail | index | archive | help
>Thanks for the reply. The ICMP was more experiment than anything, I've >sinced removed it. Here are the results of the show commands: > >cramster# ipfw show >00050 14819576 8458459132 divert 8668 ip from any to any via dc0 >00100 250 32470 allow ip from any to any via lo0 >00200 0 0 deny ip from any to 127.0.0.0/8 >00300 0 0 deny ip from 127.0.0.0/8 to any >65000 44478701 31835950367 allow ip from any to any >65100 0 0 pipe 1 ip from 10.0.0.8 to any >65200 0 0 pipe 2 ip from any to 10.0.0.8 >65535 0 0 deny ip from any to any > > > I think you're clearly being a bit silly here. Remove rules 00200 and 00300 (I dont know why on this green earth you'd deny loopback) Also you've added an "allow all" rule right above your shaping rules. You expected them to be effective after you've just told it to allow all traffic anyway? man ipfw -- Colin Alston <karnaugh@karnaugh.za.net> Quantum Logic Chicken: The chicken is distributed probabalistically on all sides of the road until you observe it on the side of your course.
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?411FBF4D.9090706>