From owner-freebsd-security Wed Mar 7 6:44:22 2001 Delivered-To: freebsd-security@freebsd.org Received: from whale.sunbay.crimea.ua (whale.sunbay.crimea.ua [212.110.138.65]) by hub.freebsd.org (Postfix) with ESMTP id D85B237B719 for ; Wed, 7 Mar 2001 06:44:02 -0800 (PST) (envelope-from ru@whale.sunbay.crimea.ua) Received: (from ru@localhost) by whale.sunbay.crimea.ua (8.11.2/8.11.2) id f27Ef4634900; Wed, 7 Mar 2001 16:41:04 +0200 (EET) (envelope-from ru) Date: Wed, 7 Mar 2001 16:41:04 +0200 From: Ruslan Ermilov To: "Timothy S. Bowers" Cc: freebsd-security@FreeBSD.ORG Subject: Re: TOS ipfw Message-ID: <20010307164104.C97252@sunbay.com> Mail-Followup-To: "Timothy S. Bowers" , freebsd-security@FreeBSD.ORG References: <5.0.2.1.2.20010307163300.02020040@196.33.45.2> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.2.5i In-Reply-To: <5.0.2.1.2.20010307163300.02020040@196.33.45.2>; from tim@nol.co.za on Wed, Mar 07, 2001 at 04:34:18PM +0200 Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org On Wed, Mar 07, 2001 at 04:34:18PM +0200, Timothy S. Bowers wrote: > Hello, > > Has anyone seen ipfw limit bandwidth on TOS (Type Of Service) ? > Any help in the right direction would help :) > -CURRENT ipfw(8) can do this: : iptos spec : Match if the IP header contains the comma separated list : of service types specified in spec. The supported IP : types of service are: : lowdelay (IPTOS_LOWDELAY), throughput (IPTOS_THROUGHPUT), : reliability (IPTOS_RELIABILITY), mincost (IPTOS_MINCOST), : congestion (IPTOS_CE). The absence of a particular type : may be denoted with a `!'. This way, you can pass IP packets with a given TOS through a certain DUMMYNET pipe for bandwidth limitation. Cheers, -- Ruslan Ermilov Oracle Developer/DBA, ru@sunbay.com Sunbay Software AG, ru@FreeBSD.org FreeBSD committer, +380.652.512.251 Simferopol, Ukraine http://www.FreeBSD.org The Power To Serve http://www.oracle.com Enabling The Information Age To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message