Hi, I try to use dummynet with natd, but I don't understand where I must write pipes/queues lines.
I want to use fair queueing on my sdsl line, and I don't understand if I must write rules : 1) before the firsts lines of nat 2) Between nat and chek-state 3) before allow/deny 4) After allow/deny 5) After lasts natd lines. I wonder also if pipes rules replace allow rules : if a packet is accepted in a pipe, it's also allowed, isn't it ? My rules are : # Les paquets autorises sont nattes -> important $cmd 55300 divert 8868 ip from any to any in via $adsl1_if $cmd 55301 divert 8869 ip from any to any in via $adsl2_if $cmd 55302 divert 8870 ip from any to any in via $sdsl_if # On accepte les paquets autorises par keep-state $cmd 55320 check-state ... some deny/allow/skipto lines ... #nat everything that get's here, should be ok as local allowed in first $cmd 61000 divert 8868 ip from $interne to any in $cmd 61100 divert 8868 ip from $interne to any out $cmd 61300 allow all from any to any $cmd 62000 divert 8869 ip from $interne to any out $cmd 62500 divert 8869 ip from $interne to any in $cmd 62700 allow all from any to any $cmd 63000 divert 8870 ip from $interne_all to any out $cmd 63500 divert 8870 ip from $interne_all to any in $cmd 63600 allow all from any to any #policy route to send traffic to correct isp $cmd 61200 fwd $isp1 ip from $adsl1_ip to any $cmd 62550 fwd $isp2 ip from $adsl2_ip to any $cmd 63700 fwd $isp3 ip from $sdsl_ip to any $cmd 65534 allow all from any to any Tkanks for your help, Grégoire Leroy _______________________________________________ freebsd-ipfw@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-ipfw To unsubscribe, send any mail to "freebsd-ipfw-unsubscr...@freebsd.org"
