Date: Tue, 12 Sep 2006 22:49:07 +0300 From: Odhiambo Washington <wash@wananchi.com> To: freebsd-questions@freebsd.org Subject: ipfw - bandwidth throttling (sanity check!) Message-ID: <20060912194907.GA44560@ns2.wananchi.com>
next in thread | raw e-mail | index | archive | help
Hello Security guy ;) I have tried very hard to understand ipfw just for the purpose of bandwidth throttling for smtp service. Basically, I want to throttle the bandwidth used by my SMTP server outbound to _anyone_ else except my ip blocks. My Server is 1.2.3.4 and my ip blocks are a.b.c.d/19 and e.f.g.h/20 Are the following rules sane enough? ipfw pipe 1 config bw 256Kbit/s ipfw add pipe 1 tcp from 1.2.3.4 to not a.b.c.d/19 25 ipfw add pipe 1 tcp from 1.2.3.4 to not e.f.g.h/20 25 Any smtp traffic not to these netblocks should be throttled. By that, I am thinking it will match everything smtp outbound only, not inbound. Thank you for your time. -Wash http://www.netmeister.org/news/learn2quote.html DISCLAIMER: See http://www.wananchi.com/bms/terms.php -- +======================================================================+ |\ _,,,---,,_ | Odhiambo Washington <wash@wananchi.com> Zzz /,`.-'`' -. ;-;;,_ | Wananchi Online Ltd. www.wananchi.com |,4- ) )-,_. ,\ ( `'-'| Tel: +254 20 313985-9 +254 20 313922 '---''(_/--' `-'\_) | GSM: +254 722 743223 +254 733 744121 +======================================================================+ Don't put off for tomorrow what you can do today, because if you enjoy it today you can do it again tomorrow.
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20060912194907.GA44560>