From owner-freebsd-questions@FreeBSD.ORG Sat Jan 7 08:12:08 2012 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 8C094106564A for ; Sat, 7 Jan 2012 08:12:08 +0000 (UTC) (envelope-from budiyt@gmail.com) Received: from mail-qw0-f54.google.com (mail-qw0-f54.google.com [209.85.216.54]) by mx1.freebsd.org (Postfix) with ESMTP id 4A53E8FC13 for ; Sat, 7 Jan 2012 08:12:07 +0000 (UTC) Received: by qabg14 with SMTP id g14so1604987qab.13 for ; Sat, 07 Jan 2012 00:12:07 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=mime-version:date:message-id:subject:from:to:cc:content-type; bh=Ooaho3D+gSgFvkCASTKCTCVojHWTqLBLrjc6sKAJN/w=; b=sfB52b+fa+vrIvMROx8nQhRHbG4+36YiONL9BYuSkLeLC9SUe6TcIy2BLoUtmaFAqk S2zy/KSFel9ak/FxhpTiBRjokfO5OMJmH009ru9WGqo4xaP0W/BIr3IwO0YZFgO+l2cN AAvdkhHJu4+F7OA90/LpZXIAAxg1gSS8yCmUY= MIME-Version: 1.0 Received: by 10.224.189.136 with SMTP id de8mr805727qab.85.1325922175121; Fri, 06 Jan 2012 23:42:55 -0800 (PST) Received: by 10.229.246.133 with HTTP; Fri, 6 Jan 2012 23:42:55 -0800 (PST) Date: Sat, 7 Jan 2012 14:42:55 +0700 Message-ID: From: budsz To: freebsd-questions@freebsd.org Content-Type: text/plain; charset=ISO-8859-1 Cc: freebsd-ipfw@freebsd.org Subject: IPFW transparent VS dummynet rules X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 07 Jan 2012 08:12:08 -0000 Hi folks, I already found the mistake of my ruleset sequence on my box, for ex: ${fwcmd} add 30 fwd ${ipproxy},${portproxy} tcp from ${ipclproxy} to any dst-port ${porthttp} in via ${ifint0} ${fwcmd} add 52 pipe 2 ip from any to ${ipclient} via ${ifint0} ${fwcmd} add 53 pipe 3 ip from ${ipclient} to any via ${ifint0} ${fwcmd} pipe 2 config bw ${bwcldown} mask dst-ip 0xffffffff ${fwcmd} pipe 3 config bw ${bwclup} mask src-ip 0xffffffff With this ruleset sequence, the limiter didn't work but fwd rules working. If I switching like: ${fwcmd} add 52 pipe 2 ip from any to ${ipclient} via ${ifint0} ${fwcmd} add 53 pipe 3 ip from ${ipclient} to any via ${ifint0} ${fwcmd} pipe 2 config bw ${bwcldown} mask dst-ip 0xffffffff ${fwcmd} pipe 3 config bw ${bwclup} mask src-ip 0xffffffff ${fwcmd} add 70 fwd ${ipproxy},${portproxy} tcp from ${ipclproxy} to any dst-port ${porthttp} in via ${ifint0} The limiter working but fwd didn't work. Anyone have a clue for fix this dilemma? Thank You -- budsz