From owner-freebsd-questions Fri Feb 4 12: 6:26 2000 Delivered-To: freebsd-questions@freebsd.org Received: from dan.emsphone.com (dan.emsphone.com [199.67.51.101]) by builder.freebsd.org (Postfix) with ESMTP id C0FBE47AE for ; Fri, 4 Feb 2000 12:06:10 -0800 (PST) Received: (from dan@localhost) by dan.emsphone.com (8.9.3/8.9.3) id NAA19539; Fri, 4 Feb 2000 13:43:02 -0600 (CST) (envelope-from dan) Date: Fri, 4 Feb 2000 13:43:02 -0600 From: Dan Nelson To: Steve Hovey Cc: freebsd-questions@FreeBSD.ORG Subject: Re: Limiting bandwidth Message-ID: <20000204134302.B18195@dan.emsphone.com> References: <20000203153519.A32993@dan.emsphone.com> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Mailer: Mutt 1.0.1i In-Reply-To: ; from "Steve Hovey" on Fri Feb 4 08:44:36 GMT 2000 X-OS: FreeBSD 4.0-CURRENT Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG In the last episode (Feb 04), Steve Hovey said: > > One last question then on a point that isnt clear in my head. > > The traffic I want to limit is gatewayed ed0 <--> fxp0 > > Do the statements/setup below only apply to packets destined for that > interface (to be gated or for it specifically), ignoring all other > packets on that ethernet? (I think all adapters see all packets, but > only accept, deal with those corresponding to their IP or to be > routed no?) If you're asking whether machine B can arbitrarily block packets going from machine A to machine C if they are all on the same hub, the answer is no. By the time B sees the packets, it's already "too late", as C sees them at the same time. You can only filter packets that pass _through_ B (this includes packets routed back out the same interface they came in). > Just seems like I should be saying something line in fxp0 out ed0 to > designate the packet path. (but then I could just be needin more > coffee today) Depends on what you want limited. If your customer is on fxp0, then put both your rules in fxp0. If other customer data goes through ed0, you will end up filtering their traffic also. If you identify customers by IP/network instead of interface, you can filter on that instead. -- Dan Nelson dnelson@emsphone.com To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message