From owner-freebsd-net@FreeBSD.ORG  Fri Oct  9 08:27:44 2009
Return-Path: <owner-freebsd-net@FreeBSD.ORG>
Delivered-To: freebsd-net@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id D797A1065670
	for <freebsd-net@freebsd.org>; Fri,  9 Oct 2009 08:27:44 +0000 (UTC)
	(envelope-from oleg@lath.rinet.ru)
Received: from lath.rinet.ru (lath.rinet.ru [195.54.192.90])
	by mx1.freebsd.org (Postfix) with ESMTP id 91D578FC08
	for <freebsd-net@freebsd.org>; Fri,  9 Oct 2009 08:27:44 +0000 (UTC)
Received: by lath.rinet.ru (Postfix, from userid 222)
	id 5EB55704E; Fri,  9 Oct 2009 12:27:43 +0400 (MSD)
Date: Fri, 9 Oct 2009 12:27:43 +0400
From: Oleg Bulyzhin <oleg@FreeBSD.org>
To: Julian Elischer <julian@elischer.org>
Message-ID: <20091009082743.GB70940@lath.rinet.ru>
References: <20091007085902.GA88982@lath.rinet.ru> <4ACC5E23.8090405@mail.ru>
	<20091007100503.GB88982@lath.rinet.ru> <4ACC6A7B.5050808@mail.ru>
	<20091007104525.GC88982@lath.rinet.ru>
	<4ACC7308.6070301@mail.ru> <4ACCC30E.7080504@elischer.org>
	<4ACCC4F3.3030302@mail.ru> <20091008060608.GA23793@lath.rinet.ru>
	<4ACE10CF.2030806@elischer.org>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <4ACE10CF.2030806@elischer.org>
User-Agent: Mutt/1.5.18 (2008-05-17)
Cc: rihad <rihad@mail.ru>, freebsd-net@freebsd.org
Subject: Re: dummynet dropping too many packets
X-BeenThere: freebsd-net@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: Networking and TCP/IP with FreeBSD <freebsd-net.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-net>,
	<mailto:freebsd-net-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-net>
List-Post: <mailto:freebsd-net@freebsd.org>
List-Help: <mailto:freebsd-net-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-net>,
	<mailto:freebsd-net-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Fri, 09 Oct 2009 08:27:44 -0000

On Thu, Oct 08, 2009 at 09:18:23AM -0700, Julian Elischer wrote:
> that seems like a bug to me..
> neither tee should ever terminate a search.
agree. But documented bug is a feature ;) and i'm not sure if we fix this
wouldnt it break POLA?

> 
> if you want to terminate it, add a specific rule to do so.
> Unfortunately I wasn't involved in writing it.
ip_fw_pfil.c:
revision 1.17
date: 2005/02/05 12:06:33;  author: glebius;  state: Exp;  lines: +47 -0
Add a ng_ipfw node, implementing a quick and simple interface between
ipfw(4) and netgraph(4) facilities.

Reviewed by:    andre, brooks, julian
                               ^^^^^^

-- 
Oleg.

================================================================
=== Oleg Bulyzhin -- OBUL-RIPN -- OBUL-RIPE -- oleg@rinet.ru ===
================================================================