From owner-freebsd-net@FreeBSD.ORG Mon Nov 1 13:13:22 2004 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 102F116A4CE for ; Mon, 1 Nov 2004 13:13:22 +0000 (GMT) Received: from rproxy.gmail.com (rproxy.gmail.com [64.233.170.197]) by mx1.FreeBSD.org (Postfix) with ESMTP id 9C12C43D46 for ; Mon, 1 Nov 2004 13:13:21 +0000 (GMT) (envelope-from vincepoy@gmail.com) Received: by rproxy.gmail.com with SMTP id 79so130315rnk for ; Mon, 01 Nov 2004 05:13:21 -0800 (PST) DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=beta; d=gmail.com; h=received:message-id:date:from:reply-to:to:subject:cc:in-reply-to:mime-version:content-type:content-transfer-encoding:references; b=iXAalXBYT44OWlIM6Pen5lfuSUZcOCt3D8gklVEEiKZ6yfW3hnB3a++BEbNvdIyVVErUzOmhjMOq3bIfp5p3VbpIB5NwaH4UpP2kr4Xjn+H1v2XAwHJwsGybCz3cDvTX1pMae9T6Llb9AWRQdCnUmnDRj4kGQMU62INgc0UWfzM= Received: by 10.38.66.50 with SMTP id o50mr718621rna; Mon, 01 Nov 2004 05:13:21 -0800 (PST) Received: by 10.38.14.49 with HTTP; Mon, 1 Nov 2004 05:13:21 -0800 (PST) Message-ID: <429af92e041101051357fc2384@mail.gmail.com> Date: Mon, 1 Nov 2004 05:13:21 -0800 From: Vincent Poy To: Ari Suutari In-Reply-To: <02d801c4c00d$24fc2a30$2508473e@sad.syncrontech.com> Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit References: <200410300927.51286.ari@suutari.iki.fi> <429af92e04103118435b35f235@mail.gmail.com> <016901c4bfe5$77c19d90$2508473e@sad.syncrontech.com> <429af92e041101021638e8598e@mail.gmail.com> <02d801c4c00d$24fc2a30$2508473e@sad.syncrontech.com> cc: freebsd-net@freebsd.org cc: freebsd-current@freebsd.org cc: Andre Oppermann cc: freebsd-ipfw@freebsd.org Subject: Re: ipfw and ipsec processing order for outgoing packets wrong X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list Reply-To: Vincent Poy List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 01 Nov 2004 13:13:22 -0000 On Mon, 1 Nov 2004 14:20:10 +0200, Ari Suutari wrote: > > The counters for queue 1 keeps increasing when I do a ftp out even for > > non-ACK packets but the other counters for queue 2-4 doesn't move at > > all so it seems like everything is going out one queue instead of what > > the rules actually say. I have one pipe configured as 480Kbit/sec > > which is what rules 63005-63008 does. > > Are you using IPsec ? > > Ari S. Nope... As you can see, I'm just using ipfw2 with dummynet for pipe/queue just for traffic shaping. Cheers, Vince