Date: Wed, 17 Aug 2005 12:02:35 +0800 From: he ccjj <heccjj1@gmail.com> To: freebsd-questions@freebsd.org Subject: Fwd: How to limit the nat's stream speed? Message-ID: <6f9d8a505081621024e34f9ff@mail.gmail.com> In-Reply-To: <6f9d8a5050816210169f248ff@mail.gmail.com> References: <6f9d8a505080922315e2bc928@mail.gmail.com> <20050810093428.62d11299@apircalabu.dsd.ro> <6f9d8a5050816210169f248ff@mail.gmail.com>
next in thread | previous in thread | raw e-mail | index | archive | help
Good,I use your method to solute the problem,i do like this:
add dummynet_enabe=3D"YES" to /boot/loader.conf
then
add these lines to /etc/rc.firewall:
${fwcmd} add pipe 1 ip from ${inet} to any out limit src-addr 400
${fwcmd} add pipe 2 ip from any to ${inet} in limit src-addr 400
${fwcmd} pipe 1 config delay 2ms bw 10Mbit/s
${fwcmd} pipe 2 config delay 2ms bw 10Mbit/s
yeah!
But the speed was limited to about 350KB/s when i download enven in LAN!
I changed scr-add and delay and bw,it's like that have no effect
except deleting delay 2ms(about 800KB/s without delay). The users of
LAN will hate me from now! :<
2005/8/10, Adi Pircalabu <apircalabu@bitdefender.com>:
> On Wed, 10 Aug 2005 13:31:28 +0800
> he ccjj <heccjj1@gmail.com> wrote:
>
> > I use freebsd5.4+ipfw+natd to setup a box for sharing internet,it's
> > work fine.But i have a very serious problem:
> > Some computer of my inner user was attacked by virus,they make very
> > big volume of stream to internet,so the natd will occupy almost all
> > the cpu,the others can't visit internet at all !! Is there a solution
> > to limit the natd's cpu occupancy or limit every user's stream speed?
>
> You may take a look at ipfw(8) manpage and search for dummynet
> configuration.
> For example, if you know the offending IP, you can try something like
> this:
>
> kldload dummynet
> ipfw pipe ${pipe-num} config bw ${max-bw}
> ipfw add ${rule-num} pipe ${pipe-num} ip from ${offending-IP} to any
>
> It's a very simple example, take it as a starting point.
> Bye
>
> --
> Adi Pircalabu (PGP Key ID 0x04329F5E)
>
>
> --
> This message was scanned for spam and viruses by BitDefender.
> For more information please visit http://www.bitdefender.com/
>
>
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?6f9d8a505081621024e34f9ff>