From owner-freebsd-pf@FreeBSD.ORG Mon Jul 11 21:58:51 2011 Return-Path: Delivered-To: freebsd-pf@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 7906E106566B for ; Mon, 11 Jul 2011 21:58:51 +0000 (UTC) (envelope-from ermal.luci@gmail.com) Received: from mail-iy0-f182.google.com (mail-iy0-f182.google.com [209.85.210.182]) by mx1.freebsd.org (Postfix) with ESMTP id 4531E8FC13 for ; Mon, 11 Jul 2011 21:58:50 +0000 (UTC) Received: by iyb11 with SMTP id 11so5290236iyb.13 for ; Mon, 11 Jul 2011 14:58:50 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=mime-version:sender:in-reply-to:references:date :x-google-sender-auth:message-id:subject:from:to:cc:content-type :content-transfer-encoding; bh=Q0fqZSo89o7FOWZALXEVuthaull0gbRrx4YEGp8H0jo=; b=WsbyGM1DAYNByh08NFzK0XyCtgZJtIKeADPucQ3wOKj3hH4rcmmbbhXFmipxZEZGA2 5kVi0GG5WL7+KGEgHhW/Svuo7b3F8xQ7G4xakaVCnm14qBK+A3mrHcjbvJt1d1aeT7ks 5t9d3UrxzlYQ47iwDzJ2ANYSedPjbcF9Q4nTU= MIME-Version: 1.0 Received: by 10.231.91.208 with SMTP id o16mr4902411ibm.49.1310421530455; Mon, 11 Jul 2011 14:58:50 -0700 (PDT) Sender: ermal.luci@gmail.com Received: by 10.231.171.148 with HTTP; Mon, 11 Jul 2011 14:58:50 -0700 (PDT) In-Reply-To: <010b01cc3fc2$7763b450$662b1cf0$@karaelmas.edu.tr> References: <010b01cc3fc2$7763b450$662b1cf0$@karaelmas.edu.tr> Date: Mon, 11 Jul 2011 23:58:50 +0200 X-Google-Sender-Auth: -RenLV_6NcV4dKn9YtGE05xJIog Message-ID: From: =?ISO-8859-1?Q?Ermal_Lu=E7i?= To: =?ISO-8859-1?B?TXVyYXQgU9xS3EPc?= Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable Cc: freebsd-pf@freebsd.org Subject: Re: FreeBSD 8.2 + pf + ipfw (dummynet) X-BeenThere: freebsd-pf@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Technical discussion and general questions about packet filter \(pf\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 11 Jul 2011 21:58:51 -0000 2011/7/11 Murat S=DCR=DCC=DC : > Hello, > > I used PF and dummynet together about two years and worked fine. > Recently i have upgraded the system 7.2 to 8.2 and dummynet doesn't work > anymore. > If any packet belong the client IP puts any pipe, it drops and pflog says= it > blocked by last pf rule. But it match previous rule. > If i disable (flush) the ipfw rules, packets pass normally. > > Does anybody have same experience? You have to make sure ipfw module is loaded first otherwise you will hit pf states twice which will drop as you see. > > http://forums.freebsd.org/showthread.php?t=3D24947 > > Thanks. > > Murat > > > _______________________________________________ > freebsd-pf@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-pf > To unsubscribe, send any mail to "freebsd-pf-unsubscribe@freebsd.org" > --=20 Ermal