From owner-freebsd-ipfw@FreeBSD.ORG Fri Sep 22 15:30:25 2006 Return-Path: X-Original-To: freebsd-ipfw@freebsd.org Delivered-To: freebsd-ipfw@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id B66B916A412 for ; Fri, 22 Sep 2006 15:30:25 +0000 (UTC) (envelope-from mrutman@widevine.com) Received: from seamail003.widevine.com (seamail003.widevine.com [67.105.198.43]) by mx1.FreeBSD.org (Postfix) with ESMTP id 249E543D45 for ; Fri, 22 Sep 2006 15:30:18 +0000 (GMT) (envelope-from mrutman@widevine.com) Received: from seamail002.widevine.com (seamail002.widevine.com [10.200.10.15]) by seamail003.widevine.com (8.13.4/8.13.4) with ESMTP id k8MFUIqS021516; Fri, 22 Sep 2006 08:30:18 -0700 (PDT) Received: from [10.100.2.133] ([10.100.254.2]) by seamail002.widevine.com with Microsoft SMTPSVC(5.0.2195.6713); Fri, 22 Sep 2006 08:30:17 -0700 Mime-Version: 1.0 Message-Id: In-Reply-To: References: Date: Fri, 22 Sep 2006 11:30:09 -0400 To: , From: Michael Rutman X-OriginalArrivalTime: 22 Sep 2006 15:30:17.0370 (UTC) FILETIME=[01B5FFA0:01C6DE5C] X-SMTP-Vilter-Version: 1.1.9 X-SMTP-Vilter-Virus-Backend: clamd X-SMTP-Vilter-Status: clean X-SMTP-Vilter-clamd-Virus-Status: clean X-SMTP-Vilter-Unwanted-Backend: attachment X-SMTP-Vilter-attachment-Unwanted-Status: clean Content-Type: text/plain; charset="us-ascii" X-Content-Filtered-By: Mailman/MimeDel 2.1.5 Cc: Subject: Re: DummyNet in Bridge mode help X-BeenThere: freebsd-ipfw@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: IPFW Technical Discussions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 22 Sep 2006 15:30:25 -0000 Thanks. Not sure why these 3 commands work where my 2 did not. I guess the queue is what matters. Whatever it was it now works. Much appreciated. At 8:32 AM -0700 9/22/06, wrote: >Hi, > >pipe 2 config delay 5000ms >queue 100 config pipe 2 weight 100 >add 2 queue 100 icmp from any to any > >The above rules work like a charm. > >Below is the ping after the pipe. I have changed the ip address > >#ping XXX.XX.XX.XX >64 bytes from XXX.XX.XX.XX: icmp_seq=88 ttl=48 time=5138.269 ms >64 bytes from XXX.XX.XX.XX: icmp_seq=89 ttl=48 time=5150.124 ms >64 bytes from XXX.XX.XX.XX: icmp_seq=90 ttl=48 time=5163.875 ms >64 bytes from XXX.XX.XX.XX: icmp_seq=91 ttl=48 time=5149.844 ms >64 bytes from XXX.XX.XX.XX: icmp_seq=97 ttl=48 time=202.380 ms >64 bytes from XXX.XX.XX.XX: icmp_seq=98 ttl=48 time=275.423 ms >64 bytes from XXX.XX.XX.XX: icmp_seq=99 ttl=48 time=156.222 ms > >I removed the pipe after the 4th ping and it came back to the normal. > >-Sunil Sunder Raj >http://daemon.in > >----- Original Message ----- >From: "Michael Rutman" >To: >Sent: Thursday, September 21, 2006 11:56 PM >Subject: DummyNet in Bridge mode help > > >> >> I am unable to get dummynet to do anything for me >> >> I am using FreeBSD 6.1. >> >> I recompiled the kernel to add these options: >> >> options IPFIREWALL >> options IPFIREWALL_VERBOSE >> options IPFIREWALL_VERBOSE_LIMIT >> options DUMMYNET >> options HZ=1000 >> options NMBCLUSTERS=65535 >> options BRIDGE >> options IPFIREWALL_DEFAULT_TO_ACCEPT >> >> >> I set these options to 1, though not at boot time, does that matter? >> >> net.link.ether.bridge.ipfw: 1 >> net.link.ether.bridge.enable: 1 >> net.link.ether.bridge.config: em1,bge0 >> net.link.ether.bridge_ipfw: 1 >> net.link.ether.bridge_cfg: em1,bge0 >> net.link.ether.ipfw: 1 >> net.inet.ip.fw.enable: 1 >> net.inet.ip.fw.one_pass: 1 >> net.inet.ip.fw.debug: 1 >> net.inet.ip.fw.verbose: 1 >> net.inet.ip.fw.verbose_limit: 10000 >> >> >> At this point I can ping through the bridge. I can take the bridge down >> and see the pings stop, bring it back up and see them continue, so I know >> the packets go through it. >> >> I then do >> >> ipfw add pipe 1 ip from any to any >> ipfw pipe config 1 delay 5000ms >> >> The pings do not slow down at all. >> >> Any suggestions for what I'm doing wrong? >> >> Thanks >> _______________________________________________ >> freebsd-ipfw@freebsd.org mailing list >> >>http://lists.freebsd.org/mailman/listinfo/freebsd-ipfw >> To unsubscribe, send any mail to "freebsd-ipfw-unsubscribe@freebsd.org" >>