Date: Tue, 13 Apr 2004 18:53:21 +0200 (CEST) From: Ludo Koren <lk@tempest.sk> To: rizzo@icir.org Cc: ipfw@freebsd.org Subject: Re: limiting bandwith Message-ID: <200404131653.i3DGrLb7057734@lk106.tempest.sk> In-Reply-To: <20040413091734.A98975@xorpc.icir.org> (message from Luigi Rizzo on Tue, 13 Apr 2004 09:17:34 -0700)
next in thread | previous in thread | raw e-mail | index | archive | help
> i think it is pilot error.
I do not argue. yes, it probably is.
> Be warned that dynamic rules only match addresses and ports, so
> once a rule is installed it will match traffic both in and out.
> If you want to select on other attributes you have to do it
> before you hit any keep-state or check-state rule.
> I don't know if it matches recent reports about dummynet on
> 5.2.1 giving half the bandwidth, but i just checked locally and
> it does work as expected -- the bandwidth is correct (with a
> correct ipfw config, that is :)
I just cannot put together rules, that do what I want. If I omit
keep-state from the rule:
add pipe 20 tcp from B to A dst-port 25 out xmit xl1 keep-state
it stops working. Basically, I am lost...
> cheers luigi
lk
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200404131653.i3DGrLb7057734>