Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 2 Dec 2008 12:08:47 -0600
From:      "Sam Fourman Jr." <sfourman@gmail.com>
To:        kstalledo@binarysalad.com
Cc:        freebsd-isp@freebsd.org, freebsd-pf <freebsd-pf@freebsd.org>
Subject:   Re: PF + ALTQ - Bandwidth per customer
Message-ID:  <11167f520812021008r13cb927cy409af862f0bbaa9e@mail.gmail.com>
In-Reply-To: <493575F7.7020904@binarysalad.com>
References:  <20081124180411.0b065be5@wolwerine> <705757.42117.qm@web38504.mail.mud.yahoo.com> <11167f520812011508u46b04e7dmb1d5d22675dc778d@mail.gmail.com> <20081202075634.GT51761@server.vk2pj.dyndns.org> <4934F4F3.1030808@bsd.ee> <20081202092204.GU51761@server.vk2pj.dyndns.org> <20081202070343.34221p9405nzs76s@econet.encontacto.net> <11167f520812020940w423bf0cco466a3423f762b291@mail.gmail.com> <493575F7.7020904@binarysalad.com>

next in thread | previous in thread | raw e-mail | index | archive | help
On Tue, Dec 2, 2008 at 11:52 AM, Kahlil Erwin Talledo
<kstalledo@binarysalad.com> wrote:
> Sam Fourman Jr. wrote:
>>> I had forgotten that dummynet can be used with pf. Maybe i should start=
 this
>>> with a new subject but it is directly related in that I need bandwidth
>>> control again that I don=B4t have since changing to pf.
>>>
>>>  o- What needs to be patched/done to make them work together
>>>     on Current and Releng?
>>>  o- Are you happier with the combination of dummynet with pf
>>>     than with IPFW?
>>>
>>> DummyNet was one of the reasons that I was slow to leave IPFW.
>>>
>>> Thanks and I am really not trying to hijack this thread, be glad to sta=
rt a
>>> new one.
>>
>> so you actually can use DummyNet w/ pf to limit bandwidth per ip?
>>
>> is there anyway to say.. ip address x must be used with MAC Address y
>> then follow the per ip bandwidth limit
>> if not then drop all traffic in and out?
>
> you have to remember that mac is layer two and it can be easily spoofed.
>  so doing it that way might not be the best thing to do it. that's just
> my two cents though.

you are absolutely right, after thinking about it a bit more, the
right idea would be to
somehow limit bandwidth per ip or group of ip's(several bound to the
same interface)
any ideas?

Sam Fourman Jr.
Fourman Networks



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?11167f520812021008r13cb927cy409af862f0bbaa9e>