Date: Fri, 22 Sep 2006 11:30:09 -0400 From: Michael Rutman <mrutman@widevine.com> To: <unixtools@hotmail.com>, <freebsd-ipfw@freebsd.org> Subject: Re: DummyNet in Bridge mode help Message-ID: <a06230902c139b1d946e8@[10.100.2.133]> In-Reply-To: <BAY106-DAV927731F4DA422C01FAE3DAE210@phx.gbl> References: <a0623090cc10ba9f66aa1@[192.168.99.40]> <BAY106-DAV927731F4DA422C01FAE3DAE210@phx.gbl>
next in thread | previous in thread | raw e-mail | index | archive | help
Thanks. Not sure why these 3 commands work where my 2 did not. I guess the queue is what matters. Whatever it was it now works. Much appreciated. At 8:32 AM -0700 9/22/06, <unixtools@hotmail.com> wrote: >Hi, > >pipe 2 config delay 5000ms >queue 100 config pipe 2 weight 100 >add 2 queue 100 icmp from any to any > >The above rules work like a charm. > >Below is the ping after the pipe. I have changed the ip address > >#ping XXX.XX.XX.XX >64 bytes from XXX.XX.XX.XX: icmp_seq=88 ttl=48 time=5138.269 ms >64 bytes from XXX.XX.XX.XX: icmp_seq=89 ttl=48 time=5150.124 ms >64 bytes from XXX.XX.XX.XX: icmp_seq=90 ttl=48 time=5163.875 ms >64 bytes from XXX.XX.XX.XX: icmp_seq=91 ttl=48 time=5149.844 ms >64 bytes from XXX.XX.XX.XX: icmp_seq=97 ttl=48 time=202.380 ms >64 bytes from XXX.XX.XX.XX: icmp_seq=98 ttl=48 time=275.423 ms >64 bytes from XXX.XX.XX.XX: icmp_seq=99 ttl=48 time=156.222 ms > >I removed the pipe after the 4th ping and it came back to the normal. > >-Sunil Sunder Raj ><http://daemon.in>http://daemon.in > >----- Original Message ----- >From: "Michael Rutman" <mrutman@widevine.com> >To: <freebsd-ipfw@freebsd.org> >Sent: Thursday, September 21, 2006 11:56 PM >Subject: DummyNet in Bridge mode help > > >> >> I am unable to get dummynet to do anything for me >> >> I am using FreeBSD 6.1. >> >> I recompiled the kernel to add these options: >> >> options IPFIREWALL >> options IPFIREWALL_VERBOSE >> options IPFIREWALL_VERBOSE_LIMIT >> options DUMMYNET >> options HZ=1000 >> options NMBCLUSTERS=65535 >> options BRIDGE >> options IPFIREWALL_DEFAULT_TO_ACCEPT >> >> >> I set these options to 1, though not at boot time, does that matter? >> >> net.link.ether.bridge.ipfw: 1 >> net.link.ether.bridge.enable: 1 >> net.link.ether.bridge.config: em1,bge0 >> net.link.ether.bridge_ipfw: 1 >> net.link.ether.bridge_cfg: em1,bge0 >> net.link.ether.ipfw: 1 >> net.inet.ip.fw.enable: 1 >> net.inet.ip.fw.one_pass: 1 >> net.inet.ip.fw.debug: 1 >> net.inet.ip.fw.verbose: 1 >> net.inet.ip.fw.verbose_limit: 10000 >> >> >> At this point I can ping through the bridge. I can take the bridge down >> and see the pings stop, bring it back up and see them continue, so I know >> the packets go through it. >> >> I then do >> >> ipfw add pipe 1 ip from any to any >> ipfw pipe config 1 delay 5000ms >> >> The pings do not slow down at all. >> >> Any suggestions for what I'm doing wrong? >> >> Thanks >> _______________________________________________ >> freebsd-ipfw@freebsd.org mailing list >> >><http://lists.freebsd.org/mailman/listinfo/freebsd-ipfw>http://lists.freebsd.org/mailman/listinfo/freebsd-ipfw >> To unsubscribe, send any mail to "freebsd-ipfw-unsubscribe@freebsd.org" >>
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?a06230902c139b1d946e8>