From owner-freebsd-questions@FreeBSD.ORG Fri Sep 24 15:37:47 2004 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 9FF5516A4CE for ; Fri, 24 Sep 2004 15:37:47 +0000 (GMT) Received: from tyberius.abccom.bc.ca (tyberius.abccom.bc.ca [204.239.167.97]) by mx1.FreeBSD.org (Postfix) with SMTP id 2FF0443D46 for ; Fri, 24 Sep 2004 15:37:47 +0000 (GMT) (envelope-from jon@abccom.bc.ca) Received: (qmail 8380 invoked by uid 1000); 24 Sep 2004 15:37:39 -0000 Received: from localhost (sendmail-bs@127.0.0.1) by localhost with SMTP; 24 Sep 2004 15:37:39 -0000 Date: Fri, 24 Sep 2004 08:37:38 -0700 (PDT) From: Jon Simola To: Bikrant Neupane In-Reply-To: <200409241548.14313.bikrant_ml@wlink.com.np> Message-ID: <20040924083040.N60082-100000@tyberius.abccom.bc.ca> MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII cc: freebsd-isp@freebsd.org cc: freebsd-questions@freebsd.org Subject: Re: Ipfw accept rule X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 24 Sep 2004 15:37:47 -0000 On Fri, 24 Sep 2004, Bikrant Neupane wrote: > > > Well, I have no problem with the MAC filtering rules. > > > Only problem that I am having is that the pkts hit the matching rule > > > twice as a result I get only half of the b/w than that specified in ipfw > > > pipe command. Yes, the packets will hit the pipe twice. Once at layer2 and once at layer3. You're not stopping the packets from passing through a pipe simply by leaving out a "layer2" from the rule. ether_input -> ipfw -> ip_input -> ipfw -> network stack > > > Isn't there a way to construct rules such that matching pkts hit the rule > > > only once? Write your ruleset appropriately, or stick "not layer2" on your pipe rules. --- Jon Simola | "In the near future - corporate networks Systems Administrator | reach out to the stars, electrons and light ABC Communications | flow throughout the universe." -- GITS