Date: Thu, 26 Sep 2002 18:24:32 -0400 From: "Adam Migus" <adam@migus.org> To: "Luis Almeida" <laa@orion.ipt.pt> Cc: <freebsd-ipfw@freebsd.org> Subject: RE: dummynet traffic shaping + nat + rc.firewall ? Message-ID: <HGEBLKNLFOJKKBGJBAKDEEGJCAAA.adam@migus.org> In-Reply-To: <20020926201014.Q4135-100000@orion.ipt.pt>
next in thread | previous in thread | raw e-mail | index | archive | help
I believe your problem might be caused by nat. The packet has already ran
through nat by the time it reaches your rule. Thus the source address is
that of ${oif}. Try moving the pipe 10 above the divert rule.
Adam
> -----Original Message-----
> From: owner-freebsd-ipfw@FreeBSD.ORG
> [mailto:owner-freebsd-ipfw@FreeBSD.ORG]On Behalf Of Luis Almeida
> Sent: Thursday, September 26, 2002 3:21 PM
> To: freebsd-ipfw@FreeBSD.ORG
> Cc: laa@ipt.pt
> Subject: dummynet traffic shaping + nat + rc.firewall ?
>
>
>
>
> Hello
>
> Sorry if this mailing-list is just for developer people!
>
> Can anyone suggest the cause (or solution) for the following problem?
>
> I have setup a FreeBSD4.6.2 box to act as a gateway (NAT + IPFW with 2
> NIC).
> I tried to use dummynet to shape the traffic and i created two pipes to
> control the upload and the download traffic (both pipes with same
> bandwith)(i am using rc.firewall file (simple) to setup the ipfw rules):
>
> ${fwcmd} add pipe 10 all from 192.168.1.0/24 to any out via ${oif}
> ${fwcmd} add pipe 20 all from any to 192.168.1.0/24 in via ${oif}
> ${fwcmd} pipe 10 config mask src-ip 0x000000ff bw 200Kbit/s queue
> 20Kbytes
> ${fwcmd} pipe 20 config mask dst-ip 0x000000ff bw 200Kbit/s queue
> 20Kbytes
>
> The firewall and NAT runs is OK
>
> The problem is that i can limit the download traffic
> but the upload traffic is higher and not the same (it seems that the
> upload traffic do not pass by pipe 10)
>
> Is there any right place to put those pipes on rc.firewall?
> (i.e. after or before the divert rule)?
> Is there any conflict with nat divert rule and (mask src-ip 0x000000ff) ?
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-ipfw" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?HGEBLKNLFOJKKBGJBAKDEEGJCAAA.adam>