From owner-freebsd-stable@FreeBSD.ORG Sat Oct 11 07:51:29 2003 Return-Path: Delivered-To: freebsd-stable@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 5D07516A4B3 for ; Sat, 11 Oct 2003 07:51:29 -0700 (PDT) Received: from bastion.pydo.net (bastion.pydo.net [62.212.97.116]) by mx1.FreeBSD.org (Postfix) with ESMTP id 0818A43FB1 for ; Sat, 11 Oct 2003 07:51:28 -0700 (PDT) (envelope-from artur@pydo.org) Received: by bastion.pydo.net (Postfix, from userid 10025) id 820A84C2E4; Sat, 11 Oct 2003 16:51:26 +0200 (CEST) Received: from pydo.org (univers.ipv6.pydo.org [IPv6:2001:7a8:2574:0:250:8dff:fea5:1452]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by bastion.pydo.net (Postfix) with ESMTP id 991094C2E3 for ; Sat, 11 Oct 2003 16:51:24 +0200 (CEST) Message-ID: <3F8818EA.9040802@pydo.org> Date: Sat, 11 Oct 2003 16:51:22 +0200 From: Artur Pydo User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.6a) Gecko/20031004 X-Accept-Language: fr-fr, fr, en-us, en MIME-Version: 1.0 To: freebsd-stable@freebsd.org X-Enigmail-Version: 0.76.7.0 X-Enigmail-Supports: pgp-inline, pgp-mime Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit X-Spam-Checker-Version: SpamAssassin 2.60 (1.212-2003-09-23-exp) on bastion.pydo.net X-Spam-Level: X-Spam-Status: No, hits=0.1 required=5.0 tests=AWL autolearn=ham version=2.60 Subject: ipfw2/dummynet + ipfilter not working together ? X-BeenThere: freebsd-stable@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Production branch of FreeBSD source code List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 11 Oct 2003 14:51:29 -0000 [ Repost from freebsd-questions ] Hi, I have 4.9-RC router on a ADSL access and currently using ipfilter for statefull filtering+nat that is working well. ipfw2 is configured for a long time with a "pass all" policy. When i try to configure a pipe with queues for traffic shaping as described in the following message (see URL) the TCP connection gets frozen : http://mail.gnu.org/archive/html/mldonkey-users/2003-01/msg00911.html I tried to diagnose what happens and discovered that some packets are said "accepted" by IPfilter but never gets out of tun0 with pipe/queue activated. If i delete all IPFilter rules (pass all policy) traffic shaping is working right. Everything is working fine if i flush all pipes/queues from ipfw2 configuration but i have no traffic shaping. :/ So, my question is : Is there some incompatabilities between ipfw2/dummynet and IPFilter or maybe there is a bug somewhere ? -- Best regards, Artur Pydo.