Date: Tue, 12 Jul 2011 08:54:50 +0300 From: =?iso-8859-9?B?TXVyYXQgU9xS3EPc?= <msurucu@karaelmas.edu.tr> To: =?iso-8859-9?Q?'Ermal_Lu=E7i'?= <eri@freebsd.org> Cc: freebsd-pf@freebsd.org Subject: RE: FreeBSD 8.2 + pf + ipfw (dummynet) Message-ID: <002601cc4058$36a5b170$a3f11450$@karaelmas.edu.tr> In-Reply-To: <CAPBZQG2wi4RxPdPZ4yLkryf3TuRtQGPCC=Q8AqLD5sJbsGgYpw@mail.gmail.com> References: <010b01cc3fc2$7763b450$662b1cf0$@karaelmas.edu.tr> <CAPBZQG2wi4RxPdPZ4yLkryf3TuRtQGPCC=Q8AqLD5sJbsGgYpw@mail.gmail.com>
next in thread | previous in thread | raw e-mail | index | archive | help
Thanks for reply, IPFW is kernel module, PF is loadable module in my config. And this config was normally run when version is 7.2. Murat=20 -----Original Message----- From: ermal.luci@gmail.com [mailto:ermal.luci@gmail.com] On Behalf Of = Ermal Lu=E7i Sent: Tuesday, July 12, 2011 12:59 AM To: Murat S=DCR=DCC=DC Cc: freebsd-pf@freebsd.org Subject: Re: FreeBSD 8.2 + pf + ipfw (dummynet) 2011/7/11 Murat S=DCR=DCC=DC <msurucu@karaelmas.edu.tr>: > Hello, > > I used PF and dummynet together about two years and worked fine. > Recently i have upgraded the system 7.2 to 8.2 and dummynet doesn't=20 > work anymore. > If any packet belong the client IP puts any pipe, it drops and pflog=20 > says it blocked by last pf rule. But it match previous rule. > If i disable (flush) the ipfw rules, packets pass normally. > > Does anybody have same experience? You have to make sure ipfw module is loaded first otherwise you will hit = pf states twice which will drop as you see. > > http://forums.freebsd.org/showthread.php?t=3D24947 > > Thanks. > > Murat > > > _______________________________________________ > freebsd-pf@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-pf > To unsubscribe, send any mail to "freebsd-pf-unsubscribe@freebsd.org" > -- Ermal
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?002601cc4058$36a5b170$a3f11450$>