Date: Tue, 24 May 2005 21:22:16 +0500 From: Tofik Suleymanov <tofik@oxygen.az> To: bu7cher@yandex.ru Cc: Rauf Kuliyev <rauf@kuliyev.com>, freebsd-stable@freebsd.org Subject: Re: IPFW2 patch Message-ID: <429354B8.7080301@oxygen.az> In-Reply-To: <4291B081.4000308@yandex.ru> References: <4291B081.4000308@yandex.ru>
next in thread | previous in thread | raw e-mail | index | archive | help
Andrey V. Elsukov wrote: >Hello, Developers! > >Sorry, my english is bad. :( > >Patch to IPFW2 for adding restrictions of the traffic with use IPFW >bytes counters. >It include two parts: > >* First part is ipfw_bound.patch, this part add ipfw rule options "bound >VALUE" and "check-bound NUM". >Example: ># ipfw add 100 allow ip from any to any bound 10K ># ipfw add 200 deny ip from any to any > >While bytes counter of rule 100 below 10 KBytes, it work. > >Example: ># ipfw add 100 allow ip from A.B.C.D to any out xmit internet >check-bound 200 ># ipfw add 200 allow ip from any to A.B.C.D in recv internet bound 100M ># ipfw add 300 deny ip from any to any via internet > >While bytes counter of rule 200 below 100 MBytes, rules 100 and 200 work. >NOTE: Check-bound option search rule NUM like "ipfw skipto", but if rule >NUM not contain bound option, then match fail. > >Second part is bound_change.patch, this part add control call to ipfw >for boundary value change without bytes counter reset. >Syntax: ># ipfw bound NUM [set N] change VALUE. > >Files: >For CURRENT: >http://butcher.heavennet.ru/ipfw_bound/CURRENT/ipfw_bound.patch >http://butcher.heavennet.ru/ipfw_bound/CURRENT/bound_change.patch > >For RELENG_5: >http://butcher.heavennet.ru/ipfw_bound/RELENG_5/ipfw_bound.patch >http://butcher.heavennet.ru/ipfw_bound/RELENG_5/bound_change.patch > >For RELENG_5_4: >http://butcher.heavennet.ru/ipfw_bound/RELENG_5_4/ipfw_bound.patch >http://butcher.heavennet.ru/ipfw_bound/RELENG_5_4/bound_change.patch > > > Andrey, simple testing on RELENG_5_4 and RELENG_5 went fine.
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?429354B8.7080301>