From owner-freebsd-security@FreeBSD.ORG Wed May 7 06:32:58 2003 Return-Path: Delivered-To: freebsd-security@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 76B5D37B401 for ; Wed, 7 May 2003 06:32:58 -0700 (PDT) Received: from avgw.vxserver.com (mail.ridgeway-sys.com [194.128.67.178]) by mx1.FreeBSD.org (Postfix) with SMTP id 1F8E743F3F for ; Wed, 7 May 2003 06:32:55 -0700 (PDT) (envelope-from raqlist@fareham.org) Received: from disney.internal.ridgewaysystems.com ([10.1.1.52]) by avgw.vxserver.com (NAVGW 2.5.2.12) with SMTP id M2003050714304102116 for ; Wed, 07 May 2003 14:30:41 +0100 Received: from Unknown [10.1.2.27] by disney.internal.ridgewaysystems.com - SurfControl E-mail Filter (4.5); Wednesday, 07 May 2003, 14:33:46 Message-ID: <3EB91913.3069.4E3B6B49@localhost> From: "Roger " To: freebsd-security@freebsd.org Date: Wed, 7 May 2003 14:32:51 +0100 MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7BIT X-mailer: Pegasus Mail for Windows (v4.01) Priority: normal In-reply-to: Content-description: Mail message body Subject: Re: IPFW Bandwidth throttling? X-BeenThere: freebsd-security@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Security issues [members-only posting] List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 07 May 2003 13:32:58 -0000 Date sent: Wed, 7 May 2003 09:03:55 -0400 (EDT) From: Chris McGee Subject: IPFW Bandwidth throttling? > I am trying to limit outgoing SMTP traffic to about 14 Mbps and these are > the IPFW rules I am using. > > ${fwcmd} add pipe 1 tcp from 192.168.0.0/24 to any 25 out via dc0 > ${fwcmd} pipe 1 config bw 14Mbit/s > > I've tried multiple tweaks to the pipe rule and I seem to be missing > something. I only get about half the bandwidth I specify. Is this normal > behavior? Is there something wrong with the rule I'm running? > > Thanks, > Chris man ipfw, didn't show anything obvious, have you checked your net.inet.ip.fw.one_pass sysctl var. If it's 0 then the rest of your rules run on the packet as well (I think). Have you got a return rule set as well ? Is anything limiting what the outside world is sending back ? Roger.