From owner-freebsd-ipfw@freebsd.org Tue Jul 19 18:25:32 2016 Return-Path: Delivered-To: freebsd-ipfw@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 92A98B9D73B for ; Tue, 19 Jul 2016 18:25:32 +0000 (UTC) (envelope-from lev@FreeBSD.org) Received: from onlyone.friendlyhosting.spb.ru (onlyone.friendlyhosting.spb.ru [IPv6:2a01:4f8:201:6350::2]) by mx1.freebsd.org (Postfix) with ESMTP id 609841FAA for ; Tue, 19 Jul 2016 18:25:32 +0000 (UTC) (envelope-from lev@FreeBSD.org) Received: from [192.168.17.133] (unknown [89.113.128.32]) (Authenticated sender: lev@serebryakov.spb.ru) by onlyone.friendlyhosting.spb.ru (Postfix) with ESMTPSA id 4C6AAB53 for ; Tue, 19 Jul 2016 21:25:30 +0300 (MSK) Reply-To: lev@FreeBSD.org To: "freebsd-ipfw@freebsd.org" From: Lev Serebryakov Subject: Strange printing of rule with "unreach6" action Organization: FreeBSD Message-ID: <8c7d63c6-1d81-8d89-7e53-cc8a6ee1e8fb@FreeBSD.org> Date: Tue, 19 Jul 2016 21:25:29 +0300 User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:45.0) Gecko/20100101 Thunderbird/45.2.0 MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit X-BeenThere: freebsd-ipfw@freebsd.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: IPFW Technical Discussions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 19 Jul 2016 18:25:32 -0000 ipfw add 16005 unreach6 address ipv6 from any to 2001:4de0:ac10::1:1:14 gives unreach6 address16005 ip6 from any to 2001:4de0:ac10::1:1:14 And "ipfw show 16005" prints (some spaces between columns are removed) unreach6 address16005 80 5574 ip6 from any to 2001:4de0:ac10::1:1:14 -- // Lev Serebryakov From owner-freebsd-ipfw@freebsd.org Tue Jul 19 20:38:38 2016 Return-Path: Delivered-To: freebsd-ipfw@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id C2932B9E2B9 for ; Tue, 19 Jul 2016 20:38:38 +0000 (UTC) (envelope-from lists@jnielsen.net) Received: from webmail2.jnielsen.NET (webmail2.jnielsen.net [50.114.224.20]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "webmail2.jnielsen.net", Issuer "freebsdsolutions.net" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id A7C881FA0 for ; Tue, 19 Jul 2016 20:38:38 +0000 (UTC) (envelope-from lists@jnielsen.net) Received: from [10.3.129.92] (50-207-240-162-static.hfc.comcastbusiness.net [50.207.240.162]) (authenticated bits=0) by webmail2.jnielsen.NET (8.15.2/8.15.2) with ESMTPSA id u6JKcRhu006063 (version=TLSv1 cipher=ECDHE-RSA-AES256-SHA bits=256 verify=NO); Tue, 19 Jul 2016 14:38:32 -0600 (MDT) (envelope-from lists@jnielsen.net) X-Authentication-Warning: webmail2.jnielsen.NET: Host 50-207-240-162-static.hfc.comcastbusiness.net [50.207.240.162] claimed to be [10.3.129.92] Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Mac OS X Mail 9.3 \(3124\)) Subject: Re: Dummynet combined upload en download bandwidth limit per client From: John Nielsen In-Reply-To: <0ed020c5-aa22-4c33-216f-a6dc52720c68@rickvanderzwet.nl> Date: Tue, 19 Jul 2016 14:38:27 -0600 Cc: freebsd-ipfw@freebsd.org Content-Transfer-Encoding: quoted-printable Message-Id: References: <0ed020c5-aa22-4c33-216f-a6dc52720c68@rickvanderzwet.nl> To: Rick van der Zwet X-Mailer: Apple Mail (2.3124) X-BeenThere: freebsd-ipfw@freebsd.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: IPFW Technical Discussions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 19 Jul 2016 20:38:38 -0000 > On Jun 20, 2016, at 6:50 AM, Rick van der Zwet = wrote: >=20 > I would like to be able to limit bandwidth (upload + download) per > client using dummynet. Yet I fail to create dynamic pipes which = matches > both upload and download at the same time. re2 is the interface on = which > the the clients are connected in network 192.168.0.0/24. >=20 > I am able to limit download (300Mbit/s) with dynamic pipes using: > ${fwcmd} pipe 1 config bw 300Kbit/s mask dst-ip 0xffffffff > ${fwcmd} add 60000 pipe 1 ip from not me to 192.168.0.0/24 via re2 = out >=20 > I am able to limit upload (300Mbit/s) with dynamic pipes using: > ${fwcmd} pipe 1 config bw 300Kbit/s mask src-ip 0xffffffff > ${fwcmd} add 60000 pipe 1 ip from 192.168.0.0/24 to not me via re2 = in >=20 > I am able to limit upload+download (total 300Mbit/s) for single > (192.168.0.10) IP using: > ${fwcmd} pipe 1 config bw 300Kbit/s > ${fwcmd} add 60000 pipe 1 ip from not me to 192.168.0.10/32 via re2 = out > ${fwcmd} add 60000 pipe 1 ip from 192.168.0.10/32 to not me via re2 = in >=20 > Yet duplicating the last one for all client IPs addresses 'feels' = wrong > and is a bit verbose. Am I able to limit upload+download bandwidth for > multiple IPs without pre-creation of 1 pipe per client and the = required > rules? You can create a per-IP pipe using the "mask" keyword when defining the = pipe, e.g.: ipfw pipe 1 config bw 300Kbit/s mask src-ip 0xffffffff However, that would create different pipes based on source IP only = (regardless of direction). I'm not sure there's a way to handle both = directions in a single pipe other than creating a static pipe per IP as = you've outlined above. JN From owner-freebsd-ipfw@freebsd.org Wed Jul 20 05:09:46 2016 Return-Path: Delivered-To: freebsd-ipfw@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 71F2DB9F591 for ; Wed, 20 Jul 2016 05:09:46 +0000 (UTC) (envelope-from bu7cher@yandex.ru) Received: from forward2m.cmail.yandex.net (forward2m.cmail.yandex.net [5.255.216.20]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "forwards.mail.yandex.net", Issuer "Yandex CA" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 251401C92; Wed, 20 Jul 2016 05:09:45 +0000 (UTC) (envelope-from bu7cher@yandex.ru) Received: from smtp4h.mail.yandex.net (smtp4h.mail.yandex.net [84.201.186.21]) by forward2m.cmail.yandex.net (Yandex) with ESMTP id 6C43920FE2; Wed, 20 Jul 2016 08:09:10 +0300 (MSK) Received: from smtp4h.mail.yandex.net (localhost [127.0.0.1]) by smtp4h.mail.yandex.net (Yandex) with ESMTP id 6B0502C03BB; Wed, 20 Jul 2016 08:09:10 +0300 (MSK) Received: by smtp4h.mail.yandex.net (nwsmtp/Yandex) with ESMTPSA id L4rXm7xPoC-9AYCdscV; Wed, 20 Jul 2016 08:09:10 +0300 (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client certificate not present) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yandex.ru; s=mail; t=1468991350; bh=/QXy2zx/imQbvfEsgBVYwKDC3x3kK0EQGeVYXO8/h+0=; h=Subject:To:References:From:Message-ID:Date:In-Reply-To; b=VFKm9cRVqdwe6ycAqbblBc15YMrMmvlPlW+tQQz2MZwtVTDzBlTaHxqzL/mJlJuHk vjQSAL4WY69LnFwT+6wX/lziKQ8Cuu8dkGT2z4YEJCUNPVMcrv+Z8RRQcc5XxKbTj0 IneP4vsvS9fBPtvEI1IJ0eJmjrchyI2rH3v0YuSc= Authentication-Results: smtp4h.mail.yandex.net; dkim=pass header.i=@yandex.ru X-Yandex-Suid-Status: 1 0,1 0 Subject: Re: Strange printing of rule with "unreach6" action To: lev@FreeBSD.org, "freebsd-ipfw@freebsd.org" References: <8c7d63c6-1d81-8d89-7e53-cc8a6ee1e8fb@FreeBSD.org> From: "Andrey V. Elsukov" Message-ID: Date: Wed, 20 Jul 2016 08:08:10 +0300 User-Agent: Mozilla/5.0 (X11; FreeBSD amd64; rv:45.0) Gecko/20100101 Thunderbird/45.2.0 MIME-Version: 1.0 In-Reply-To: <8c7d63c6-1d81-8d89-7e53-cc8a6ee1e8fb@FreeBSD.org> Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="RDrBCpTKvuxKqbW5cNKkdn5dmb4C9x5EV" X-BeenThere: freebsd-ipfw@freebsd.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: IPFW Technical Discussions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 20 Jul 2016 05:09:46 -0000 This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --RDrBCpTKvuxKqbW5cNKkdn5dmb4C9x5EV Content-Type: multipart/mixed; boundary="RXcXdx46xKPwB1fqqFHPLXW7KJg92Xb9r" From: "Andrey V. Elsukov" To: lev@FreeBSD.org, "freebsd-ipfw@freebsd.org" Message-ID: Subject: Re: Strange printing of rule with "unreach6" action References: <8c7d63c6-1d81-8d89-7e53-cc8a6ee1e8fb@FreeBSD.org> In-Reply-To: <8c7d63c6-1d81-8d89-7e53-cc8a6ee1e8fb@FreeBSD.org> --RXcXdx46xKPwB1fqqFHPLXW7KJg92Xb9r Content-Type: text/plain; charset=windows-1252 Content-Transfer-Encoding: quoted-printable On 19.07.16 21:25, Lev Serebryakov wrote: >=20 > ipfw add 16005 unreach6 address ipv6 from any to 2001:4de0:ac10::1:1:14= >=20 > gives >=20 > unreach6 address16005 ip6 from any to 2001:4de0:ac10::1:1:14 >=20 > And "ipfw show 16005" prints (some spaces between columns are removed) >=20 > unreach6 address16005 80 5574 ip6 from any to 2001:4de0:ac10::1:1:14 I think it should be fixed after r297981. --=20 WBR, Andrey V. Elsukov --RXcXdx46xKPwB1fqqFHPLXW7KJg92Xb9r-- --RDrBCpTKvuxKqbW5cNKkdn5dmb4C9x5EV Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iQEvBAEBCAAZBQJXjwc6EhxidTdjaGVyQHlhbmRleC5ydQAKCRABxeoEEMiherfh B/94rLRNCKWTnPbaGfzXeNAIXEsQAj9P/+uPpSSXyVXddVyKFrgXb6gGBtL4PdLq ollo+kpsv4YZePV+bS9Uldi1LikB/WEGnUeGN2dyjy1tGcPJBF2gxXn77XviYkow jpmunza0u4gOgJ8iK9GGIHel0EXXXd4iqgfyHKuQBS2zy7WG9ZD0ihs71T4vaHeJ cvenqahQeOhqGNnyhA0PRitpghX7OvlbqswUxHHQzGSwSa9Ys/0lLIsAi9FH+QcC tr8rwC3i8Q1MoEfQZ8No6U5b5MM3Zt9RuoykM+Mk0OgAqEqdYgwRhtEd5tLQe6KV 7VPQffohEAdLFNUlrQZX3Jq6 =/Cow -----END PGP SIGNATURE----- --RDrBCpTKvuxKqbW5cNKkdn5dmb4C9x5EV-- From owner-freebsd-ipfw@freebsd.org Thu Jul 21 16:44:46 2016 Return-Path: Delivered-To: freebsd-ipfw@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 40D01BA00C9 for ; Thu, 21 Jul 2016 16:44:46 +0000 (UTC) (envelope-from mascaraquegskatherinuq@outlook.com) Received: from BAY004-OMC4S24.hotmail.com (bay004-omc4s24.hotmail.com [65.54.190.226]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (Client CN "*.outlook.com", Issuer "Microsoft IT SSL SHA2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 15E471EDA for ; Thu, 21 Jul 2016 16:44:45 +0000 (UTC) (envelope-from mascaraquegskatherinuq@outlook.com) Received: from NAM01-BN3-obe.outbound.protection.outlook.com ([65.54.190.200]) by BAY004-OMC4S24.hotmail.com over TLS secured channel with Microsoft SMTPSVC(7.5.7601.23008); Thu, 21 Jul 2016 09:44:45 -0700 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=suEsr3j/BP2uGMywUv+JQt0u2lknQDIKzbIzY1XhleM=; b=J9Q9cgQAi5dxhdzCdoPhk+j3htodRR1FJtbguemZop7Z+QhuC0T2UhIJLpLmgs0Gag5ImGs41F3syfd6pcYhuYkvxxsO/G65mv6BLzQZArTjSsy46vyvSDFfAF4N/Yihh3szEGiIt/+ArrRh8eLp2ImQ3KNLt2CHshgxkaiBQbCWUOveP9pHV3wqPD3aEldzOv7XZEvPCsS5cy80LOWji+TOHGSTn4py3PsCA+fwgpCv7kyAWzPd2emQ7/EkURxtMT+Ujii2rXFer0UGaCzziUnz/hP2DC1Pm49U0cByd+o3Q2AU/zFS/qJVaeqlOHZ2uGuehU4KRHx+pRO9Li7fpQ== Received: from SN1NAM01FT060.eop-nam01.prod.protection.outlook.com (10.152.64.57) by SN1NAM01HT023.eop-nam01.prod.protection.outlook.com (10.152.65.116) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.1.549.5; Thu, 21 Jul 2016 16:44:43 +0000 Received: from DM2PR0501MB860.namprd05.prod.outlook.com (10.152.64.52) by SN1NAM01FT060.mail.protection.outlook.com (10.152.64.104) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.1.549.5 via Frontend Transport; Thu, 21 Jul 2016 16:44:43 +0000 Received: from DM2PR0501MB860.namprd05.prod.outlook.com ([10.242.115.154]) by DM2PR0501MB860.namprd05.prod.outlook.com ([10.242.115.154]) with mapi id 15.01.0549.003; Thu, 21 Jul 2016 16:44:42 +0000 From: HARRIET MCKINNEY To: "freebsd-ipfw@freebsd.org" Subject: Ipfw , Msg me and we'll meet Thread-Topic: Ipfw , Msg me and we'll meet Thread-Index: AQHR427ATWxxel0HRE6/uVz+LxJjPA== Date: Thu, 21 Jul 2016 16:41:40 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=softfail (sender IP is 10.152.64.52) smtp.mailfrom=outlook.com; freebsd.org; dkim=none (message not signed) header.d=none;freebsd.org; dmarc=fail action=none header.from=outlook.com; received-spf: SoftFail (protection.outlook.com: domain of transitioning outlook.com discourages use of 10.152.64.52 as permitted sender) x-tmn: [N0WvqvNcDlanz2qBNTu8/dyfzpCLbOE7] x-eopattributedmessage: 0 x-forefront-antispam-report: CIP:10.152.64.52; IPV:NLI; CTRY:; EFV:NLI; SFV:NSPM; SFS:(10019020)(98900003); DIR:OUT; SFP:1102; SCL:1; SRVR:SN1NAM01HT023; H:DM2PR0501MB860.namprd05.prod.outlook.com; FPR:; SPF:None; LANG:en; x-microsoft-exchange-diagnostics: 1; SN1NAM01HT023; 7:ItwQBjl4ild3iAw5GlN5md47fN3ZCpgTR9IpdG28D3vC4Nu61CmhPA9FBASTa0Nhcpvftb1rIFc9yItP9AI1B+NKkAqB9qjqGz/xH5TaGstoXcukkzaNtWl2kqeN92Zpe9NtIpTVUbfKzK4ieC7WND2cytgrwUb2ZRN8YUkjEpxxzpCUGVSsNEvoIYhCi8xG0POlCq/ukia/bkZcsKmjux3kTKWZ0DlTjILoXuzKQHFHO72E72sOB1uLU2pg5lle x-ms-office365-filtering-correlation-id: 00e3e747-0301-4624-ceb0-08d3b186509e x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(1601124038)(5061506196)(5061507196)(1603103041)(1603101187)(1601125047); SRVR:SN1NAM01HT023; x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(432015012)(82015046); SRVR:SN1NAM01HT023; BCL:0; PCL:0; RULEID:; SRVR:SN1NAM01HT023; x-forefront-prvs: 0010D93EFE spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM MIME-Version: 1.0 X-OriginatorOrg: outlook.com X-MS-Exchange-CrossTenant-originalarrivaltime: 21 Jul 2016 16:41:40.1855 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Internet X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa X-MS-Exchange-Transport-CrossTenantHeadersStamped: SN1NAM01HT023 X-OriginalArrivalTime: 21 Jul 2016 16:44:45.0416 (UTC) FILETIME=[2FDA3680:01D1E36F] Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable X-Content-Filtered-By: Mailman/MimeDel 2.1.22 X-BeenThere: freebsd-ipfw@freebsd.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: IPFW Technical Discussions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 21 Jul 2016 16:44:46 -0000 Hi you're really cute. You should msg me so we can have a drink and have so= me fun. Just looking for a fun guy.