From owner-freebsd-net@FreeBSD.ORG  Tue Feb  6 21:14:28 2007
Return-Path: <owner-freebsd-net@FreeBSD.ORG>
X-Original-To: freebsd-net@freebsd.org
Delivered-To: freebsd-net@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52])
	by hub.freebsd.org (Postfix) with ESMTP id 9307F16A402
	for <freebsd-net@freebsd.org>; Tue,  6 Feb 2007 21:14:28 +0000 (UTC)
	(envelope-from julian@elischer.org)
Received: from outZ.internet-mail-service.net (outZ.internet-mail-service.net
	[216.240.47.249])
	by mx1.freebsd.org (Postfix) with ESMTP id 77B3A13C4B8
	for <freebsd-net@freebsd.org>; Tue,  6 Feb 2007 21:14:28 +0000 (UTC)
	(envelope-from julian@elischer.org)
Received: from shell.idiom.com (HELO idiom.com) (216.240.47.20)
	by out.internet-mail-service.net (qpsmtpd/0.32) with ESMTP;
	Tue, 06 Feb 2007 12:37:45 -0800
Received: from [192.168.2.5] (home.elischer.org [216.240.48.38])
	by idiom.com (Postfix) with ESMTP id 4A61B125B34;
	Tue,  6 Feb 2007 13:00:04 -0800 (PST)
Message-ID: <45C8EC53.8020803@elischer.org>
Date: Tue, 06 Feb 2007 13:00:03 -0800
From: Julian Elischer <julian@elischer.org>
User-Agent: Thunderbird 1.5.0.9 (Macintosh/20061207)
MIME-Version: 1.0
To: Justin Robertson <justin@sk1llz.net>
References: <45C8E2A2.9040204@sk1llz.net>
In-Reply-To: <45C8E2A2.9040204@sk1llz.net>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Cc: freebsd-net@freebsd.org
Subject: Re: 6.x, 4.x ipfw/dummynet pf/altq - network performance issues
X-BeenThere: freebsd-net@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: Networking and TCP/IP with FreeBSD <freebsd-net.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-net>,
	<mailto:freebsd-net-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-net>
List-Post: <mailto:freebsd-net@freebsd.org>
List-Help: <mailto:freebsd-net-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-net>,
	<mailto:freebsd-net-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 06 Feb 2007 21:14:28 -0000

Justin Robertson wrote:
> 



> Splitting the task into a transparent filtering bridge 
> with a separate routing box appears to clear it up entirely.

how does that differ from using mac level ipfw?

i.e. turning on filtering at the NIC (layer 2).

(have you tried doing that?)