From owner-freebsd-ipfw@FreeBSD.ORG Fri Sep 22 15:21:05 2006 Return-Path: X-Original-To: freebsd-ipfw@freebsd.org Delivered-To: freebsd-ipfw@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 9C7CD16A412 for ; Fri, 22 Sep 2006 15:21:05 +0000 (UTC) (envelope-from unixtools@hotmail.com) Received: from bay0-omc1-s24.bay0.hotmail.com (bay0-omc1-s24.bay0.hotmail.com [65.54.246.96]) by mx1.FreeBSD.org (Postfix) with ESMTP id 46ACD43D73 for ; Fri, 22 Sep 2006 15:20:57 +0000 (GMT) (envelope-from unixtools@hotmail.com) Received: from hotmail.com ([65.54.161.81]) by bay0-omc1-s24.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.1830); Fri, 22 Sep 2006 08:20:57 -0700 Received: from mail pickup service by hotmail.com with Microsoft SMTPSVC; Fri, 22 Sep 2006 08:20:57 -0700 Message-ID: Received: from 203.199.109.161 by BAY106-DAV9.phx.gbl with DAV; Fri, 22 Sep 2006 15:20:55 +0000 X-Originating-IP: [203.199.109.161] X-Originating-Email: [unixtools@hotmail.com] X-Sender: unixtools@hotmail.com From: To: , "Michael Rutman" References: Date: Fri, 22 Sep 2006 21:02:22 +0530 MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2800.1437 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1441 X-OriginalArrivalTime: 22 Sep 2006 15:20:57.0424 (UTC) FILETIME=[B3F50500:01C6DE5A] Cc: Subject: Re: DummyNet in Bridge mode help X-BeenThere: freebsd-ipfw@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: IPFW Technical Discussions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 22 Sep 2006 15:21:05 -0000 Hi, pipe 2 config delay 5000ms queue 100 config pipe 2 weight 100 add 2 queue 100 icmp from any to any The above rules work like a charm. Below is the ping after the pipe. I have changed the ip address #ping XXX.XX.XX.XX 64 bytes from XXX.XX.XX.XX: icmp_seq=88 ttl=48 time=5138.269 ms 64 bytes from XXX.XX.XX.XX: icmp_seq=89 ttl=48 time=5150.124 ms 64 bytes from XXX.XX.XX.XX: icmp_seq=90 ttl=48 time=5163.875 ms 64 bytes from XXX.XX.XX.XX: icmp_seq=91 ttl=48 time=5149.844 ms 64 bytes from XXX.XX.XX.XX: icmp_seq=97 ttl=48 time=202.380 ms 64 bytes from XXX.XX.XX.XX: icmp_seq=98 ttl=48 time=275.423 ms 64 bytes from XXX.XX.XX.XX: icmp_seq=99 ttl=48 time=156.222 ms I removed the pipe after the 4th ping and it came back to the normal. -Sunil Sunder Raj http://daemon.in ----- Original Message ----- From: "Michael Rutman" To: Sent: Thursday, September 21, 2006 11:56 PM Subject: DummyNet in Bridge mode help > > I am unable to get dummynet to do anything for me > > I am using FreeBSD 6.1. > > I recompiled the kernel to add these options: > > options IPFIREWALL > options IPFIREWALL_VERBOSE > options IPFIREWALL_VERBOSE_LIMIT > options DUMMYNET > options HZ=1000 > options NMBCLUSTERS=65535 > options BRIDGE > options IPFIREWALL_DEFAULT_TO_ACCEPT > > > I set these options to 1, though not at boot time, does that matter? > > net.link.ether.bridge.ipfw: 1 > net.link.ether.bridge.enable: 1 > net.link.ether.bridge.config: em1,bge0 > net.link.ether.bridge_ipfw: 1 > net.link.ether.bridge_cfg: em1,bge0 > net.link.ether.ipfw: 1 > net.inet.ip.fw.enable: 1 > net.inet.ip.fw.one_pass: 1 > net.inet.ip.fw.debug: 1 > net.inet.ip.fw.verbose: 1 > net.inet.ip.fw.verbose_limit: 10000 > > > At this point I can ping through the bridge. I can take the bridge down > and see the pings stop, bring it back up and see them continue, so I know > the packets go through it. > > I then do > > ipfw add pipe 1 ip from any to any > ipfw pipe config 1 delay 5000ms > > The pings do not slow down at all. > > Any suggestions for what I'm doing wrong? > > Thanks > _______________________________________________ > freebsd-ipfw@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-ipfw > To unsubscribe, send any mail to "freebsd-ipfw-unsubscribe@freebsd.org" >