Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 2 Dec 2008 12:08:47 -0600
From:      "Sam Fourman Jr." <sfourman@gmail.com>
To:        kstalledo@binarysalad.com
Cc:        freebsd-isp@freebsd.org, freebsd-pf <freebsd-pf@freebsd.org>
Subject:   Re: PF + ALTQ - Bandwidth per customer
Message-ID:  <11167f520812021008r13cb927cy409af862f0bbaa9e@mail.gmail.com>
In-Reply-To: <493575F7.7020904@binarysalad.com>
References:  <20081124180411.0b065be5@wolwerine> <705757.42117.qm@web38504.mail.mud.yahoo.com> <11167f520812011508u46b04e7dmb1d5d22675dc778d@mail.gmail.com> <20081202075634.GT51761@server.vk2pj.dyndns.org> <4934F4F3.1030808@bsd.ee> <20081202092204.GU51761@server.vk2pj.dyndns.org> <20081202070343.34221p9405nzs76s@econet.encontacto.net> <11167f520812020940w423bf0cco466a3423f762b291@mail.gmail.com> <493575F7.7020904@binarysalad.com>

index | next in thread | previous in thread | raw e-mail

On Tue, Dec 2, 2008 at 11:52 AM, Kahlil Erwin Talledo
<kstalledo@binarysalad.com> wrote:
> Sam Fourman Jr. wrote:
>>> I had forgotten that dummynet can be used with pf. Maybe i should start this
>>> with a new subject but it is directly related in that I need bandwidth
>>> control again that I donīt have since changing to pf.
>>>
>>>  o- What needs to be patched/done to make them work together
>>>     on Current and Releng?
>>>  o- Are you happier with the combination of dummynet with pf
>>>     than with IPFW?
>>>
>>> DummyNet was one of the reasons that I was slow to leave IPFW.
>>>
>>> Thanks and I am really not trying to hijack this thread, be glad to start a
>>> new one.
>>
>> so you actually can use DummyNet w/ pf to limit bandwidth per ip?
>>
>> is there anyway to say.. ip address x must be used with MAC Address y
>> then follow the per ip bandwidth limit
>> if not then drop all traffic in and out?
>
> you have to remember that mac is layer two and it can be easily spoofed.
>  so doing it that way might not be the best thing to do it. that's just
> my two cents though.

you are absolutely right, after thinking about it a bit more, the
right idea would be to
somehow limit bandwidth per ip or group of ip's(several bound to the
same interface)
any ideas?

Sam Fourman Jr.
Fourman Networks


home | help

Want to link to this message? Use this
URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?11167f520812021008r13cb927cy409af862f0bbaa9e>