From owner-freebsd-net Wed May 22 17:39:10 2002 Delivered-To: freebsd-net@freebsd.org Received: from rwcrmhc52.attbi.com (rwcrmhc52.attbi.com [216.148.227.88]) by hub.freebsd.org (Postfix) with ESMTP id B5B3D37B40F for ; Wed, 22 May 2002 17:39:05 -0700 (PDT) Received: from blossom.cjclark.org ([12.234.91.48]) by rwcrmhc52.attbi.com (InterMail vM.4.01.03.27 201-229-121-127-20010626) with ESMTP id <20020523003905.ULZQ2751.rwcrmhc52.attbi.com@blossom.cjclark.org>; Thu, 23 May 2002 00:39:05 +0000 Received: (from cjc@localhost) by blossom.cjclark.org (8.11.6/8.11.6) id g4N0cvF09048; Wed, 22 May 2002 17:38:57 -0700 (PDT) (envelope-from crist.clark@attbi.com) X-Authentication-Warning: blossom.cjclark.org: cjc set sender to crist.clark@attbi.com using -f Date: Wed, 22 May 2002 17:38:57 -0700 From: "Crist J. Clark" To: Craig Rodrigues Cc: freebsd-net@FreeBSD.org Subject: Re: Question about Dummynet and Diffserv Message-ID: <20020522173857.B8894@blossom.cjclark.org> Reply-To: "Crist J. Clark" References: <20020521234248.B13074@bbn.com> <20020522024323.A34030@iguana.icir.org> <20020522123100.A24632@bbn.com> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.2.5i In-Reply-To: <20020522123100.A24632@bbn.com>; from crodrigu@bbn.com on Wed, May 22, 2002 at 12:31:00PM -0400 X-URL: http://people.freebsd.org/~cjc/ Sender: owner-freebsd-net@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org On Wed, May 22, 2002 at 12:31:00PM -0400, Craig Rodrigues wrote: > On Wed, May 22, 2002 at 02:43:23AM -0700, Luigi Rizzo wrote: > > I think the TOS matching is implemented in ipfw in 5.0, not 4.6. > > > > it should not be too hard to merge it into RELENG_4. > > > > cheers > > luigi > > Cool! Could you merge this stuff into RELENG_4, or are there more > restrictions on merging things into STABLE these days? Yes. Code freeze for 4.6-RELEASE. > If it is not possible, if I do it myself, do I just need to > download the files in /usr/src/sbin/ipfw from the CURRENT in CVS? No. sbin/ipfw is just the userland command for modifying rules. The actual firewall code lives in sys/netinet/ip_fw.{c,h}. There are old patches against 4.x for filtering on DIFSERV bits floating around. Check the archives of freebsd-security@ and freebsd-ipfw@. I think I may have some somewhere. -- Crist J. Clark | cjclark@alum.mit.edu | cjclark@jhu.edu http://people.freebsd.org/~cjc/ | cjc@freebsd.org To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-net" in the body of the message