From owner-freebsd-ipfw@FreeBSD.ORG Thu Apr 27 19:44:22 2006 Return-Path: X-Original-To: freebsd-ipfw@freebsd.org Delivered-To: freebsd-ipfw@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 57B6616A401 for ; Thu, 27 Apr 2006 19:44:22 +0000 (UTC) (envelope-from linux@giboia.org) Received: from adriana.dilk.com.br (adriana.dilk.com.br [200.250.23.1]) by mx1.FreeBSD.org (Postfix) with SMTP id 7476743D46 for ; Thu, 27 Apr 2006 19:44:18 +0000 (GMT) (envelope-from linux@giboia.org) Received: (qmail 70158 invoked by uid 98); 27 Apr 2006 19:44:29 -0000 Received: from 10.0.0.95 by lda.dilk.com.br (envelope-from , uid 82) with qmail-scanner-1.25-st-qms (uvscan: v4.4.00/v4545. perlscan: 1.25-st-qms. Clear:RC:1(10.0.0.95):. Processed in 0.024607 secs); 27 Apr 2006 19:44:29 -0000 Received: from unknown (HELO giboia) (linux@giboia.org@10.0.0.95) by adriana.dilk.com.br with SMTP; 27 Apr 2006 19:44:29 -0000 Date: Thu, 27 Apr 2006 16:47:41 -0300 From: Gilberto Villani Brito To: freebsd-ipfw@freebsd.org Message-ID: <20060427164741.5f657901@giboia> X-Mailer: Sylpheed-Claws 1.0.4 (GTK+ 1.2.10; i586-mandriva-linux-gnu) Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit Subject: Pipes. X-BeenThere: freebsd-ipfw@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: IPFW Technical Discussions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 27 Apr 2006 19:44:22 -0000 Hi, I am using PF in my firewall, but for control my bandwith I am trying use ipfw. This rules work: pipe 101 config mask dst-ip 255.255.255.255 bw 500Kbit queue 50Kbytes 02000 pipe 100 ip from any to 10.0.0.0/24 via em0 in 65534 allow ip from any to any 65535 deny ip from any to any but this rules stop my network (10.0.0.0/24): pipe 101 config mask dst-ip 255.255.255.255 bw 500Kbit queue 50Kbytes 02000 pipe 100 ip from any to 10.0.0.0/24 via em1 out 65534 allow ip from any to any 65535 deny ip from any to any Why can't I use pipe in out of my interface??? Gilberto