Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 17 May 2010 09:53:41 -0400
From:      David Horn <dhorn2000@gmail.com>
To:        Bear <jilingshu@gmail.com>
Cc:        freebsd-ipfw <freebsd-ipfw@freebsd.org>
Subject:   Re: Some problems of IP6FW on FreeBSD 8.0-RELEASE
Message-ID:  <AANLkTinYxG4jkEl4VUP7FbL7YlWjo1KnpiqlUP2vYAuy@mail.gmail.com>
In-Reply-To: <201005171833458695114@Gmail.com>
References:  <201005171833458695114@Gmail.com>

next in thread | previous in thread | raw e-mail | index | archive | help
On Mon, May 17, 2010 at 6:33 AM, Bear <jilingshu@gmail.com> wrote:
> hi all,
> I am a newbie on IPv6. I wanna to build a IPv6 Gateway on FreeBSD 8.0-REL=
EASE. Thought this gateway need to do some limitations on its clients(It wo=
rks in a university networks. At least, User Authentication and Bandwith Li=
mitation must be implemented). I wanna to use a Captive Portal to do user a=
uthentication and use ip6fw and dummynet to do bandwith control. But in my =
GENERIC kernel, it seems that there is no ip6fw available.When I type in ip=
6fw, it told me this:
>
> freebsd6# ip6fw
> ip6fw: Command not found.
> freebsd6#

ip6fw has been depreciated starting with 7.0.  As per the 7.0 Release
notes found here:   http://www.freebsd.org/releases/7.0R/relnotes.html

>>>The ip6fw(8) packet filter has been removed. Since ipfw(4)  has gained I=
Pv6 support, it should be used >>>instead. Please note that some rules migh=
t need to be adjusted.

Take a look at the FreeBSD handbook for a start on how to use ipfw:
http://www.freebsd.org/doc/en/books/handbook/firewalls-ipfw.html  and IPv6 =
here:
http://www.freebsd.org/doc/en/books/handbook/network-ipv6.html

And of course, make sure to:  'man 8 ipfw'  for all of the details, or
peruse online here:  http://www.freebsd.org/cgi/man.cgi?query=3Dipfw

Make certain to read the section labeled "TRAFFIC SHAPER (DUMMYNET)
CONFIGURATION"

Good Luck.

-_Dave

>
> So I wanna know is the ip6fw has been compiled into the GENERIC kernel? I=
f not, how can I compile it into kernel or as a loadable kernel module? And=
 what about the dummynet? If dummynet unavailable, can you give me some adv=
ises to limit bandwith?



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?AANLkTinYxG4jkEl4VUP7FbL7YlWjo1KnpiqlUP2vYAuy>