Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 11 Jul 2011 23:58:50 +0200
From:      =?ISO-8859-1?Q?Ermal_Lu=E7i?= <eri@freebsd.org>
To:        =?ISO-8859-1?B?TXVyYXQgU9xS3EPc?= <msurucu@karaelmas.edu.tr>
Cc:        freebsd-pf@freebsd.org
Subject:   Re: FreeBSD 8.2 + pf + ipfw (dummynet)
Message-ID:  <CAPBZQG2wi4RxPdPZ4yLkryf3TuRtQGPCC=Q8AqLD5sJbsGgYpw@mail.gmail.com>
In-Reply-To: <010b01cc3fc2$7763b450$662b1cf0$@karaelmas.edu.tr>
References:  <010b01cc3fc2$7763b450$662b1cf0$@karaelmas.edu.tr>

next in thread | previous in thread | raw e-mail | index | archive | help
2011/7/11 Murat S=DCR=DCC=DC <msurucu@karaelmas.edu.tr>:
> Hello,
>
> I used PF and dummynet together about two years and worked fine.
> Recently i have upgraded the system 7.2 to 8.2 and dummynet doesn't work
> anymore.
> If any packet belong the client IP puts any pipe, it drops and pflog says=
 it
> blocked by last pf rule. But it match previous rule.
> If i disable (flush) the ipfw rules, packets pass normally.
>
> Does anybody have same experience?

You have to make sure ipfw module is loaded first otherwise you will
hit pf states twice which will drop as you see.

>
> http://forums.freebsd.org/showthread.php?t=3D24947
>
> Thanks.
>
> Murat
>
>
> _______________________________________________
> freebsd-pf@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-pf
> To unsubscribe, send any mail to "freebsd-pf-unsubscribe@freebsd.org"
>



--=20
Ermal



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?CAPBZQG2wi4RxPdPZ4yLkryf3TuRtQGPCC=Q8AqLD5sJbsGgYpw>