From owner-freebsd-ipfw@FreeBSD.ORG Mon May 17 13:53:43 2010 Return-Path: Delivered-To: freebsd-ipfw@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id C9A55106566C for ; Mon, 17 May 2010 13:53:43 +0000 (UTC) (envelope-from dhorn2000@gmail.com) Received: from mail-fx0-f54.google.com (mail-fx0-f54.google.com [209.85.161.54]) by mx1.freebsd.org (Postfix) with ESMTP id 5B5B88FC1A for ; Mon, 17 May 2010 13:53:42 +0000 (UTC) Received: by fxm19 with SMTP id 19so962410fxm.13 for ; Mon, 17 May 2010 06:53:42 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:received:received:in-reply-to :references:date:message-id:subject:from:to:cc:content-type :content-transfer-encoding; bh=Watr5J/+CafuOr4F+QttLpTp1yjN9/q/G5YhILs2wIc=; b=b390KblUO5VvBDn67oiwLLAC6S2FEVX/O/e8mzWWcrfh/oVyTfwgqqzH25+WDPjN34 F9gRmLI2Sk8kSBOglnemSdYi6o3KztU2EFIUvti+tscoogJsmQn3jA1S1Qc/gUiu1R/3 gKpMaFiUdjV2KuPz2bnUTIFT6plKGUfLGK/f4= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type:content-transfer-encoding; b=KZi/Z8yIksUcDKzmj8ljUiLkmDG2xRtkSYnSWofo4TuCz9Ug4iQ2P9ZDLflqVjjIN+ MxGCfXbwsrLcT3O44IzC8qN3WXNa7EvoPIXVwNutzFkRbiLYEJlYfHtaTCh/WaRN7rQ3 HZAZu1OeCnxbVIkHPj7Y7vgUPUinwuippizKU= MIME-Version: 1.0 Received: by 10.239.187.134 with SMTP id l6mr514165hbh.151.1274104421642; Mon, 17 May 2010 06:53:41 -0700 (PDT) Received: by 10.239.150.79 with HTTP; Mon, 17 May 2010 06:53:41 -0700 (PDT) In-Reply-To: <201005171833458695114@Gmail.com> References: <201005171833458695114@Gmail.com> Date: Mon, 17 May 2010 09:53:41 -0400 Message-ID: From: David Horn To: Bear Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable Cc: freebsd-ipfw Subject: Re: Some problems of IP6FW on FreeBSD 8.0-RELEASE X-BeenThere: freebsd-ipfw@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: IPFW Technical Discussions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 17 May 2010 13:53:43 -0000 On Mon, May 17, 2010 at 6:33 AM, Bear wrote: > hi all, > I am a newbie on IPv6. I wanna to build a IPv6 Gateway on FreeBSD 8.0-REL= EASE. Thought this gateway need to do some limitations on its clients(It wo= rks in a university networks. At least, User Authentication and Bandwith Li= mitation must be implemented). I wanna to use a Captive Portal to do user a= uthentication and use ip6fw and dummynet to do bandwith control. But in my = GENERIC kernel, it seems that there is no ip6fw available.When I type in ip= 6fw, it told me this: > > freebsd6# ip6fw > ip6fw: Command not found. > freebsd6# ip6fw has been depreciated starting with 7.0. As per the 7.0 Release notes found here: http://www.freebsd.org/releases/7.0R/relnotes.html >>>The ip6fw(8) packet filter has been removed. Since ipfw(4) has gained I= Pv6 support, it should be used >>>instead. Please note that some rules migh= t need to be adjusted. Take a look at the FreeBSD handbook for a start on how to use ipfw: http://www.freebsd.org/doc/en/books/handbook/firewalls-ipfw.html and IPv6 = here: http://www.freebsd.org/doc/en/books/handbook/network-ipv6.html And of course, make sure to: 'man 8 ipfw' for all of the details, or peruse online here: http://www.freebsd.org/cgi/man.cgi?query=3Dipfw Make certain to read the section labeled "TRAFFIC SHAPER (DUMMYNET) CONFIGURATION" Good Luck. -_Dave > > So I wanna know is the ip6fw has been compiled into the GENERIC kernel? I= f not, how can I compile it into kernel or as a loadable kernel module? And= what about the dummynet? If dummynet unavailable, can you give me some adv= ises to limit bandwith?