Date: Fri, 14 Jun 2002 18:00:39 +0300 From: "Ivailo Tanusheff" <I.Tanusheff@procreditbank.com> To: "FreeBSD Questions" <freebsd-questions@freebsd.org>, "FreeBSD Security" <freebsd-security@FreeBSD.ORG> Subject: IPFW + Squid Message-ID: <006601c213b4$3f425cf0$cbf810ac@sof.procreditbank.bg>
next in thread | raw e-mail | index | archive | help
Dear Sirs,
I have the following configuration:
{Internet} <-> {SQUID1 + Net1} <-64K line-> [SQUID2] <-> {Net2}
I have the following problem:
In Net1 I have an important server to which there are connecting some
clients from Net2 trough http and the squid server. These clients have
to be able to use most of the 64K line between the two networks. In Net2
there are many clients useing the squid server as a proxy and are making
"bad" traffic.
My question is - how may I configure ipfw to shape the traffic for the
other users. I'd tried some ways of accomplishing that task, but it
seems to me, that when using proxy server, the destination IP address is
not in the IP header or I'm wrong. Can you help me?
Id tried:
su-2.05a# ipfw -a show
00500 0 0 pipe 1 ip from any to not <net1> out
00600 0 0 pipe 2 ip from any to not <net1> in
65535 397320 84804286 allow ip from any to any
As you see - there is no hit of going out of the net1.
Thank you in advantage,
Ivo
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?006601c213b4$3f425cf0$cbf810ac>