From owner-freebsd-questions  Thu Sep 20 13: 8:25 2001
Delivered-To: freebsd-questions@freebsd.org
Received: from iatl0x01.coxmail.com (mail.coxmail.com [206.157.231.10])
	by hub.freebsd.org (Postfix) with ESMTP id 0F18F37B40E
	for <freebsd-questions@FreeBSD.ORG>; Thu, 20 Sep 2001 13:08:21 -0700 (PDT)
Received: from tick.sc.omation.com ([64.58.167.31]) by iatl0x01.coxmail.com
          (InterMail vK.4.03.02.00 201-232-124 license 85f4f10023be2bd3bce00b3a38363ea2)
          with ESMTP
          id <20010920200820.EDXY6966.iatl0x01@tick.sc.omation.com>
          for <freebsd-questions@FreeBSD.ORG>;
          Thu, 20 Sep 2001 16:08:20 -0400
Received: from tick.sc.omation.com (tick.sc.omation.com [192.168.128.2])
	by tick.sc.omation.com (8.11.3/8.11.3) with ESMTP id f8KK73O07082;
	Thu, 20 Sep 2001 13:07:04 -0700 (PDT)
	(envelope-from pherman@frenchfries.net)
Date: Thu, 20 Sep 2001 13:07:03 -0700 (PDT)
From: Paul Herman <pherman@frenchfries.net>
X-X-Sender:  <pherman@tick.sc.omation.com>
To: rick norman <rick.norman@lmco.com>
Cc: <freebsd-questions@FreeBSD.ORG>
Subject: Re: ipfw
In-Reply-To: <3BA7C49E.706C9DC@lmco.com>
Message-ID: <20010920130530.W9645-100000@tick.sc.omation.com>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-questions.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-questions>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-questions>
X-Loop: FreeBSD.ORG

On Tue, 18 Sep 2001, rick norman wrote:

> I am attempting to use ipfw and dummynet to instrument some network
> traffic tests.  I am running freebsd 4.3 release and have built the
> kernel
> with ipfirewall, dummynet, and default to enabled.  For a simple test, I
>
> added a pipe "ipfw add pipe 1 icmp from any to any".  When I ping this
> machine, I can do "ipfw pipe 1 show" and watch the counters increment,
> but the machine doing the pinging does not see a response to the ping.

Does "sysctl net.inet.ip.fw.one_pass=0" help?

-Paul.


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message