From owner-freebsd-stable Fri Feb 14 0:40:25 2003 Delivered-To: freebsd-stable@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id E14AF37B401 for ; Fri, 14 Feb 2003 00:40:23 -0800 (PST) Received: from helios.earthmagic.org (helios.earthmagic.org [198.78.66.220]) by mx1.FreeBSD.org (Postfix) with ESMTP id 4B5CF43FD7 for ; Fri, 14 Feb 2003 00:40:23 -0800 (PST) (envelope-from lonewolf-freebsd@earthmagic.org) Received: (qmail 68865 invoked from network); 14 Feb 2003 08:40:21 -0000 Received: from ppp148.vic.padsl.internode.on.net (HELO Lara.earthmagic.org) (eo-lonewolf@150.101.208.147) by helios.earthmagic.org with DES-CBC3-SHA encrypted SMTP; 14 Feb 2003 08:40:21 -0000 Message-Id: <5.1.0.14.2.20030214192353.02940dc8@helios.earthmagic.org> X-Sender: eo-lonewolf@helios.earthmagic.org (Unverified) X-Mailer: QUALCOMM Windows Eudora Version 5.1 Date: Fri, 14 Feb 2003 19:39:22 +1100 To: freebsd-stable@FreeBSD.ORG From: "J. 'LoneWolf' Mattsson" Subject: Re: ipfw1 or ipfw2 in STABLE? In-Reply-To: <20030214081544.33667.qmail@web14103.mail.yahoo.com> References: <97321400.1045177521@[192.168.0.2]> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii"; format=flowed Sender: owner-freebsd-stable@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG At 09:15 14/02/2003 +0100, Claus Guttesen wrote: >I wanted to prioritize both outcoming and returning >traffic, but ipfw (ver. 1) only allowed me to >prioritize on the port, but not distinguish on the >direction. Sure it does. If you want to distinguish direction based on the port numbers, just do something like: ipfw add allow tcp from any to 10.1.1.1 80 ipfw add allow tcp from 10.1.1.1 80 to any You can specify port numbers for the source ip as well, so just reverse the rule to match the return traffic. I.e. there is no need for the src-port directive, simply specify the source port number after the source ip :) Cheers, /Johny To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-stable" in the body of the message