From owner-freebsd-questions@FreeBSD.ORG  Tue Feb  3 14:08:53 2004
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 9325A16A4CE
	for <freebsd-questions@freebsd.org>;
	Tue,  3 Feb 2004 14:08:53 -0800 (PST)
Received: from fedex.is.co.za (fedex.is.co.za [196.4.160.243])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 2C00B43D2F
	for <freebsd-questions@freebsd.org>;
	Tue,  3 Feb 2004 14:08:50 -0800 (PST)
	(envelope-from jaco@coocoo.za.net)
Received: from coocoo.za.net (c14-rba-7.dial-up.net [196.39.2.7])
	by fedex.is.co.za (Postfix) with ESMTP id 3EFFDBB6F5
	for <freebsd-questions@freebsd.org>;
	Wed,  4 Feb 2004 00:08:30 +0200 (SAST)
Message-ID: <40201C10.6070405@coocoo.za.net>
Date: Wed, 04 Feb 2004 00:09:20 +0200
From: Jaco van Tonder <jaco@coocoo.za.net>
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US;
	rv:1.6b) Gecko/20031205 Thunderbird/0.4
X-Accept-Language: en-us, en
MIME-Version: 1.0
To: freebsd-questions@freebsd.org
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Subject: [5.2.1-RC, IPFW] Traffic Shaping
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 03 Feb 2004 22:08:53 -0000

Hi all,

I am using FreeBSD 5.2.1-RC + IPFW2 + DUMMYNET to do traffic shaping.
This works well for my setup.
I have the following configuration:
The machine has 2 NIC's, xl0, dc0. The kernel is configured to do 
bridging. The bridged
packets is passed to IPFW (net.link.ether.bridge.ipfw=1).

I shape traffic this way:
The bridge is setup between a router and an internal mail server.
I am limiting bandwith using the following rules:
pipe 1 config bw 16KBytes/s
pipe 2 config bw 12KBytes/s

and then:

add pipe 1 tcp from any to any 25  (limit incoming traffic towards smtp)
add pipe 2 tcp from any 110 to any (limit outgoing traffic from pop3)

Yesterday, while browsing through Absolute BSD by Michael Lucas I read 
an interesting part:
You cannot shape incoming traffic the way that I do at the moment.

Now, my question:
How can I limit the incoming traffic towards my smtp server properly?

Any advice would be apreciated.

Thank you,
Regards
Jaco van Tonder