Date: Fri, 5 Oct 2001 11:38:01 +0400 From: "Andrey Simonenko" <simon@comsys.ntu-kpi.kiev.ua> To: "Alexander S. Usov" <lex@itv.kiev.ua> Cc: <freebsd-questions@freebsd.org> Subject: Re: Need a help with ipfw configuration Message-ID: <012301c14d70$aa3720a0$6d36120a@comsys.ntukpi.kiev.ua> References: <1251438768.20011001135051@itv.kiev.ua>
next in thread | previous in thread | raw e-mail | index | archive | help
----- Original Message ----- From: Alexander S. Usov <lex@itv.kiev.ua> Newsgroups: lucky.freebsd.questions Sent: Monday, October 01, 2001 2:51 PM Subject: Need a help with ipfw configuration > # there is a counters > for i in `/usr/bin/jot 254` > do > $fw add $((11000+$i)) count all from 192.168.1.$i to not 192.168.1.0/24 in via rl0 > $fw add $((11000+$i)) count all from not 192.168.1.0/24 to 192.168.1.$i out via rl0 > done > # NAT > $fw add 12000 divert natd all from any to any via rl1 > ............. > > As I understand, couners would work on the second pass, but I should > be sure. > I think that this is correct configuration for counters. But you can it test simply, ping some host in WAN and look at values of counters, ping use fixed size of packets (or specified size in the -s option), and checkout output of "ipfw s" with "size_of_packet * number_of_packets" transferd by ping. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?012301c14d70$aa3720a0$6d36120a>