From owner-freebsd-security@FreeBSD.ORG Mon Oct 20 09:30:34 2003 Return-Path: Delivered-To: freebsd-security@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 778C016A4BF for ; Mon, 20 Oct 2003 09:30:34 -0700 (PDT) Received: from web20509.mail.yahoo.com (web20509.mail.yahoo.com [216.136.226.144]) by mx1.FreeBSD.org (Postfix) with SMTP id E7BAF43F3F for ; Mon, 20 Oct 2003 09:30:33 -0700 (PDT) (envelope-from alhagiep@yahoo.com) Message-ID: <20031020163033.9682.qmail@web20509.mail.yahoo.com> Received: from [24.87.98.182] by web20509.mail.yahoo.com via HTTP; Mon, 20 Oct 2003 09:30:33 PDT Date: Mon, 20 Oct 2003 09:30:33 -0700 (PDT) From: Alhagie Puye To: freebsd-security@freebsd.org MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Subject: Equal bandwidth configuration among host with dummynet X-BeenThere: freebsd-security@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Security issues [members-only posting] List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 20 Oct 2003 16:30:34 -0000 Hi all, First of all, I have spent a lot of time reading up on it. Anyway, I live in a shared accomodation with 2 roommates and a landlord and we share a cable internet connection. It is 2Mbit/400Kbit connection. Sometimes when one of us is downloading a song through Kazaa or a new Linux or FreeBSD iso, the bandwidth gets hogged and other users can't get through. I was trying to configure dummynet using Fair Queues but I seem to be missing something. I tried to modify some of the examples on Luigi Rizzo's web site (http://info.iet.unipi.it/~luigi/ip_dummynet/) but it doesn't seem to be working. It is a very simple setup. Private network (192.168.42.0/24)--------> FreeBSD 5.1 firewall doing NAT (DHCP on external interface) My configuration file excerpt: ipfw pipe 1 config bw 400Kbit/s ipfw pipe 2 config bw 1000Kbit/s ipfw add queue 1 ip from 192.168.42.0/24 to any via fxp0 ipfw queue 1 config weight 5 pipe 1 mask src-ip 0xffffffff ipfw add queue 2 ip from any to 192.168.42.0/24 via fxp0 ipfw queue 2 config weight 5 pipe 2 mask dst-ip 0xfffffff When I do a "ipfw pipe show", the output is: firewall# ipfw pipe list 00001: 400.000 Kbit/s 0 ms 50 sl. 0 queues (1 buckets) droptail mask: 0x00 0x00000000/0x0000 -> 0x00000000/0x0000 00002: 1.000 Mbit/s 0 ms 50 sl. 0 queues (1 buckets) droptail mask: 0x00 0x00000000/0x0000 -> 0x00000000/0x0000 q00001: weight 5 pipe 1 50 sl. 0 queues (64 buckets) droptail mask: 0x00 0xffffffff/0x0000 -> 0x00000000/0x0000 q00002: weight 5 pipe 2 50 sl. 0 queues (64 buckets) droptail mask: 0x00 0x00000000/0x0000 -> 0xffffffff/0x0000 The queues are always "0". So, it seems to me like they are not getting created. What am I missing? I have looked everywhere for answers. Any help would be greatly appreciated. Cheers, Alhagie. __________________________________ Do you Yahoo!? The New Yahoo! Shopping - with improved product search http://shopping.yahoo.com