Date: Wed, 15 Aug 2012 10:06:23 +0430 From: saeedeh motlagh <saeedeh.motlagh@gmail.com> To: h bagade <bagadeh@gmail.com>, freebsd-net <freebsd-net@freebsd.org> Subject: Re: problem using ng_patch Message-ID: <CAN%2BS=WDxbH2yati9aKwwnDWQb0ukSFKVMaCx9dkUYtAWOAHCtw@mail.gmail.com> In-Reply-To: <CAN%2BS=WBMkK1cbm0xa7V3%2BD%2BazFFZBKAuEPjxu6mztn_9-i3=DQ@mail.gmail.com> References: <CAARSjE3LzvfMHQAT1OO4p5HCqaeDt5ykHNpsOX0-bqnjGLpieQ@mail.gmail.com> <37DC844A-4A65-438D-8DD3-B8EFA7B7FE2A@gmail.com> <CAARSjE0Qobk87%2BXQ24DWbXgH88ehHZb0TNbEoShc-B0xdzuC3A@mail.gmail.com> <CAN%2BS=WBMkK1cbm0xa7V3%2BD%2BazFFZBKAuEPjxu6mztn_9-i3=DQ@mail.gmail.com>
next in thread | previous in thread | raw e-mail | index | archive | help
i have this problem too. please let me know if you find the solution.
thanks
>
>
> On Sat, Aug 11, 2012 at 1:07 PM, h bagade <bagadeh@gmail.com> wrote:
>
>> On Sat, Aug 11, 2012 at 12:57 PM, Nikolay Denev <ndenev@gmail.com> wrote:
>>
>> > On Aug 11, 2012, at 11:07 AM, h bagade <bagadeh@gmail.com> wrote:
>> >
>> > > Hi all,
>> > >
>> > > I want to use the node ng_patch, to set the ToS field of special
>> class of
>> > > packets. I try to test the function by a simple test scenario and
>> > > encountered problem using it. I have no idea why the problem occurs.
>> > >
>> > > Here I explain the test scenario I've used.
>> > >
>> > > I have a topology like this:
>> > >
>> > >
>> >
>> |A:192.168.8.8|<---->|192.168.8.26--(B)--192.168.7.26|<---->|C:192.168.7.20|
>> > > --------------------------------
>> > > A, C: two end stations
>> > > B: a router
>> > > --------------------------------
>> > > netgraph settings:
>> > > kldload ng_ipfw
>> > > ngctl mkpeer ipfw: patch 300 in
>> > > ngctl name ipfw:300 tos
>> > > ngctl msg tos: setconfig {count=1 csum_flags=1 ops=[ {mode=1
>> value=0x05
>> > > length=1 offset=1}]}
>> > > --------------------------------
>> > > ipfw rule:
>> > > ipfw add 20 netgraph 300 icmp from any to 192.168.7.20
>> > >
>> > > This configuration works well and when A pings C or C pings A, the
>> > packets
>> > > destined to 192.168.7.20(station C) gets the ToS: 0x05.
>> > > The problem occurs when I change the ipfw rule to the following;
>> > >
>> > > ipfw add 20 netgraph 300 icmp from 192.168.7.20 to any
>> > >
>> > > By this rule, neither A can ping C nor C can ping A! the packets sent
>> to
>> > > ng_patch node never comes back to the next ipfw rule!
>> > >
>> > > I don't know what's the difference between these two scenarios (only
>> the
>> > > checking from destination address is changed to source address), but
>> it's
>> > > what I saw in my tests. I really hope to understand what's happening.
>> > >
>> > > Any hints or comments would help
>> > > _______________________________________________
>> > > freebsd-net@freebsd.org mailing list
>> > > http://lists.freebsd.org/mailman/listinfo/freebsd-net
>> > > To unsubscribe, send any mail to "freebsd-net-unsubscribe@freebsd.org
>> "
>> >
>> > Hi,
>> >
>> > Do you have "sysctl net.inet.ip.fw.one_pass=0" set?
>> >
>> > Regards,
>> >
>> >
>> yes, As I described I've two scenarios, one work but the other doesn't,
>> and
>> the only difference is on ipfw rule!
>> _______________________________________________
>> freebsd-net@freebsd.org mailing list
>> http://lists.freebsd.org/mailman/listinfo/freebsd-net
>> To unsubscribe, send any mail to "freebsd-net-unsubscribe@freebsd.org"
>>
>
>
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?CAN%2BS=WDxbH2yati9aKwwnDWQb0ukSFKVMaCx9dkUYtAWOAHCtw>