From owner-freebsd-questions@FreeBSD.ORG Sun Oct 17 20:17:15 2004 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id CC56616A4CE for ; Sun, 17 Oct 2004 20:17:15 +0000 (GMT) Received: from relay04.roc.ny.frontiernet.net (relay04.roc.ny.frontiernet.net [66.133.131.37]) by mx1.FreeBSD.org (Postfix) with ESMTP id 585D743D39 for ; Sun, 17 Oct 2004 20:17:15 +0000 (GMT) (envelope-from drew@mykitchentable.net) Received: from filter02.roc.ny.frontiernet.net (filter02.roc.ny.frontiernet.net [66.133.131.177]) by relay04.roc.ny.frontiernet.net (Postfix) with ESMTP id B27631017A; Sun, 17 Oct 2004 20:17:14 +0000 (UTC) Received: from relay04.roc.ny.frontiernet.net ([66.133.131.37]) [66.133.131.177]) (amavisd-new, port 10024) with LMTP id 15147-100-14; Sun, 17 Oct 2004 20:17:14 +0000 (UTC) Received: from blacklamb.mykitchentable.net (67-137-46-138.dsl2.elk.ca.frontiernet.net [67.137.46.138]) by relay04.roc.ny.frontiernet.net (Postfix) with ESMTP id 9C09AFF73; Sun, 17 Oct 2004 20:17:10 +0000 (UTC) Received: from [192.168.1.25] (lugalong.mykitchentable.net [192.168.1.25]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by blacklamb.mykitchentable.net (Postfix) with ESMTP id D8C5B3BF38F; Sun, 17 Oct 2004 13:17:05 -0700 (PDT) Message-ID: <4172D346.4070601@mykitchentable.net> Date: Sun, 17 Oct 2004 13:17:10 -0700 From: Drew Tomlinson User-Agent: Mozilla Thunderbird 0.8 (Windows/20040913) X-Accept-Language: en-us, en MIME-Version: 1.0 To: synrat References: <416B29BC.6080108@wirewalk.org> In-Reply-To: <416B29BC.6080108@wirewalk.org> Content-Type: multipart/signed; protocol="application/x-pkcs7-signature"; micalg=sha1; boundary="------------ms000502010903020702010108" X-Virus-Scanned: by amavisd-new-20040701 (2.0) (Debian) at filter02.roc.ny.frontiernet.net cc: freebsd-questions@freebsd.org Subject: Re: dummynet X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 17 Oct 2004 20:17:15 -0000 This is a cryptographically signed message in MIME format. --------------ms000502010903020702010108 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit On 10/11/2004 5:47 PM synrat wrote: > Can someone tell me about a good way to troubleshoot pipes/queues or > point me in the rigtt direction. I'm trying to restrict outgoing ftp > traffic and create some pipes for VOIP. dummynet and pipe rules load > fine ( and are in the kernel ) but seem to have no effect. I did read > the manual pages 20 times over. I tried adding pipes before doing > "config bw" on them, but that didn't make any difference. > thanx a lot in advance. I have tried using DUMMYNET also and don't see any effect. If you find an answer, please let me know. It's my goal to give highest priority to ssh connection, next highest priority to the traffic originating on machine "bigdaddy" port 8080, and then all remaining traffic gets passed when there's nothing else going on. I have DSL with a 128K uplink. Here is my rule set in case someone can find my error: # Flush before we define $fwcmd -f queue flush $fwcmd -f pipe flush $fwcmd pipe 1 config queue 128Kbyte $fwcmd queue 1 config pipe 1 weight 85 queue 8Kbyte $fwcmd queue 2 config pipe 1 weight 1 queue 112Kbyte $fwcmd queue 3 config pipe 1 weight 100 queue 8Kbyte $fwcmd add queue 1 ip from bigdaddy 8080 to any out via $oif $fwcmd add queue 3 ip from any 22 to any out via $oif $fwcmd add queue 2 ip from not bigdaddy not 8080 to any out via $oif $fwcmd add queue 2 ip from bigdaddy not 8080 to any out via $oif And I have these options compiled into my kernel: options IPFIREWALL options DUMMYNET options HZ=1000 Thanks, Drew -- Visit The Alchemist's Warehouse Magic Tricks, DVDs, Videos, Books, & More! http://www.alchemistswarehouse.com --------------ms000502010903020702010108 Content-Type: application/x-pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" Content-Description: S/MIME Cryptographic Signature MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAQAAoIIH+TCC AlcwggHAoAMCAQICAw0RLjANBgkqhkiG9w0BAQQFADBiMQswCQYDVQQGEwJaQTElMCMGA1UE ChMcVGhhd3RlIENvbnN1bHRpbmcgKFB0eSkgTHRkLjEsMCoGA1UEAxMjVGhhd3RlIFBlcnNv bmFsIEZyZWVtYWlsIElzc3VpbmcgQ0EwHhcNMDQwOTE4MTQ1MDAxWhcNMDUwOTE4MTQ1MDAx WjBJMR8wHQYDVQQDExZUaGF3dGUgRnJlZW1haWwgTWVtYmVyMSYwJAYJKoZIhvcNAQkBFhdk cmV3QG15a2l0Y2hlbnRhYmxlLm5ldDCBnzANBgkqhkiG9w0BAQEFAAOBjQAwgYkCgYEAwJS7 Je3OPtSkBf9B6ZrTC0vrxLNCV9WP3bHljygz2ZQtyr6TpV0j5E8ZMH9MSVxxySTXkeji/e5O C77BJrcnBUxalMn5v+Ad5Ad7ho52XWyMvlFTJSHW3S1kriBpM/boRa8uQy4YScF9qIrqGi4L VTf3xlsELK/ZfC7u84iZUd8CAwEAAaM0MDIwIgYDVR0RBBswGYEXZHJld0BteWtpdGNoZW50 YWJsZS5uZXQwDAYDVR0TAQH/BAIwADANBgkqhkiG9w0BAQQFAAOBgQCT6LpTtvsZM047jNdX CR51RKrjQgeu0XCngtVUhO3lOlKxvH2BOSd/CRQo6rXzCrTWFectUPQ60RCLiyA23tBF4sFG ThcWduFqyK8h4uBZHzuHQY9GfA6b8ndeagYGBrK7HQd/3Lf6mRxprt0wtrWXln6tdb5WTgqh ezOqHTCZ7zCCAlcwggHAoAMCAQICAw0RLjANBgkqhkiG9w0BAQQFADBiMQswCQYDVQQGEwJa QTElMCMGA1UEChMcVGhhd3RlIENvbnN1bHRpbmcgKFB0eSkgTHRkLjEsMCoGA1UEAxMjVGhh d3RlIFBlcnNvbmFsIEZyZWVtYWlsIElzc3VpbmcgQ0EwHhcNMDQwOTE4MTQ1MDAxWhcNMDUw OTE4MTQ1MDAxWjBJMR8wHQYDVQQDExZUaGF3dGUgRnJlZW1haWwgTWVtYmVyMSYwJAYJKoZI hvcNAQkBFhdkcmV3QG15a2l0Y2hlbnRhYmxlLm5ldDCBnzANBgkqhkiG9w0BAQEFAAOBjQAw gYkCgYEAwJS7Je3OPtSkBf9B6ZrTC0vrxLNCV9WP3bHljygz2ZQtyr6TpV0j5E8ZMH9MSVxx ySTXkeji/e5OC77BJrcnBUxalMn5v+Ad5Ad7ho52XWyMvlFTJSHW3S1kriBpM/boRa8uQy4Y ScF9qIrqGi4LVTf3xlsELK/ZfC7u84iZUd8CAwEAAaM0MDIwIgYDVR0RBBswGYEXZHJld0Bt eWtpdGNoZW50YWJsZS5uZXQwDAYDVR0TAQH/BAIwADANBgkqhkiG9w0BAQQFAAOBgQCT6LpT tvsZM047jNdXCR51RKrjQgeu0XCngtVUhO3lOlKxvH2BOSd/CRQo6rXzCrTWFectUPQ60RCL iyA23tBF4sFGThcWduFqyK8h4uBZHzuHQY9GfA6b8ndeagYGBrK7HQd/3Lf6mRxprt0wtrWX ln6tdb5WTgqhezOqHTCZ7zCCAz8wggKooAMCAQICAQ0wDQYJKoZIhvcNAQEFBQAwgdExCzAJ BgNVBAYTAlpBMRUwEwYDVQQIEwxXZXN0ZXJuIENhcGUxEjAQBgNVBAcTCUNhcGUgVG93bjEa MBgGA1UEChMRVGhhd3RlIENvbnN1bHRpbmcxKDAmBgNVBAsTH0NlcnRpZmljYXRpb24gU2Vy dmljZXMgRGl2aXNpb24xJDAiBgNVBAMTG1RoYXd0ZSBQZXJzb25hbCBGcmVlbWFpbCBDQTEr MCkGCSqGSIb3DQEJARYccGVyc29uYWwtZnJlZW1haWxAdGhhd3RlLmNvbTAeFw0wMzA3MTcw MDAwMDBaFw0xMzA3MTYyMzU5NTlaMGIxCzAJBgNVBAYTAlpBMSUwIwYDVQQKExxUaGF3dGUg Q29uc3VsdGluZyAoUHR5KSBMdGQuMSwwKgYDVQQDEyNUaGF3dGUgUGVyc29uYWwgRnJlZW1h aWwgSXNzdWluZyBDQTCBnzANBgkqhkiG9w0BAQEFAAOBjQAwgYkCgYEAxKY8VXNV+065ypla HmjAdQRwnd/p/6Me7L3N9VvyGna9fww6YfK/Uc4B1OVQCjDXAmNaLIkVcI7dyfArhVqqP3FW y688Cwfn8R+RNiQqE88r1fOCdz0Dviv+uxg+B79AgAJk16emu59l0cUqVIUPSAR/p7bRPGEE QB5kGXJgt/sCAwEAAaOBlDCBkTASBgNVHRMBAf8ECDAGAQH/AgEAMEMGA1UdHwQ8MDowOKA2 oDSGMmh0dHA6Ly9jcmwudGhhd3RlLmNvbS9UaGF3dGVQZXJzb25hbEZyZWVtYWlsQ0EuY3Js MAsGA1UdDwQEAwIBBjApBgNVHREEIjAgpB4wHDEaMBgGA1UEAxMRUHJpdmF0ZUxhYmVsMi0x MzgwDQYJKoZIhvcNAQEFBQADgYEASIzRUIPqCy7MDaNmrGcPf6+svsIXoUOWlJ1/TCG4+DYf qi2fNi/A9BxQIJNwPP2t4WFiw9k6GX6EsZkbAMUaC4J0niVQlGLH2ydxVyWN3amcOY6MIE9l X5Xa9/eH1sYITq726jTlEBpbNU1341YheILcIRk13iSx0x1G/11fZU8xggK6MIICtgIBATBp MGIxCzAJBgNVBAYTAlpBMSUwIwYDVQQKExxUaGF3dGUgQ29uc3VsdGluZyAoUHR5KSBMdGQu MSwwKgYDVQQDEyNUaGF3dGUgUGVyc29uYWwgRnJlZW1haWwgSXNzdWluZyBDQQIDDREuMAkG BSsOAwIaBQCgggGnMBgGCSqGSIb3DQEJAzELBgkqhkiG9w0BBwEwHAYJKoZIhvcNAQkFMQ8X DTA0MTAxNzIwMTcxMFowIwYJKoZIhvcNAQkEMRYEFF6I6/PfVHmcEWWYB29oMc5X7kQwMFIG CSqGSIb3DQEJDzFFMEMwCgYIKoZIhvcNAwcwDgYIKoZIhvcNAwICAgCAMA0GCCqGSIb3DQMC AgFAMAcGBSsOAwIHMA0GCCqGSIb3DQMCAgEoMHgGCSsGAQQBgjcQBDFrMGkwYjELMAkGA1UE BhMCWkExJTAjBgNVBAoTHFRoYXd0ZSBDb25zdWx0aW5nIChQdHkpIEx0ZC4xLDAqBgNVBAMT I1RoYXd0ZSBQZXJzb25hbCBGcmVlbWFpbCBJc3N1aW5nIENBAgMNES4wegYLKoZIhvcNAQkQ Agsxa6BpMGIxCzAJBgNVBAYTAlpBMSUwIwYDVQQKExxUaGF3dGUgQ29uc3VsdGluZyAoUHR5 KSBMdGQuMSwwKgYDVQQDEyNUaGF3dGUgUGVyc29uYWwgRnJlZW1haWwgSXNzdWluZyBDQQID DREuMA0GCSqGSIb3DQEBAQUABIGAHKmS31PHv4l6mfE/R4yqUhmkEsSTzl03vgX/Cz9NCzDd 2lJrUCPjpTUfYXGeA0oEyi2+jXW5BMhohl1HpG1CnsD0QbvpnKauDfwx37KxJxmmWA8RFVi5 rXjP2CO0rHItMhCxB/JjBee9u8fkvTCxAKV1zLiJ5UkVrHgRdksfkxcAAAAAAAA= --------------ms000502010903020702010108--