On Sun, 15 Aug 2004 12:42:43 +0200, Pawel Malachowski
<[EMAIL PROTECTED]> wrote:
> On Sat, Aug 14, 2004 at 02:28:36PM -0700, Fargo Holiday wrote:
>
> > Here are the rules I've been trying, let me know if this not correct:
> >
> > ipfw pipe 1 config bw 50Kbit/s queue 10 delay 2000ms #outbound
> > ipfw pipe 2 config bw 150Kbit/s queue 10 delay 2000ms #inbound
> > ipfw add deny icmp from any to any
>
> Blocking all ICMP traffic is a Very Bad Thing.
>
> > ipfw add pipe 1 all from 10.0.0.8 to any
> > ipfw add pipe 2 all from any to 10.0.0.8
> >
> > The painful delay was to test if the pipes were actually working, but
> > never seemed to make a difference.
>
> Try:
> ipfw show
> ipfw pipe show 1
> ipfw pipe show 2
> and look at counters.
>
> --
> PaweÅ MaÅachowski
>
Thanks for the reply. The ICMP was more experiment than anything, I've
sinced removed it. Here are the results of the show commands:
cramster# ipfw show
00050 14819576 8458459132 divert 8668 ip from any to any via dc0
00100 250 32470 allow ip from any to any via lo0
00200 0 0 deny ip from any to 127.0.0.0/8
00300 0 0 deny ip from 127.0.0.0/8 to any
65000 44478701 31835950367 allow ip from any to any
65100 0 0 pipe 1 ip from 10.0.0.8 to any
65200 0 0 pipe 2 ip from any to 10.0.0.8
65535 0 0 deny ip from any to any
cramster# ipfw pipe show 1
00001: 50.000 Kbit/s 2000 ms 10 sl. 0 queues (1 buckets) droptail
mask: 0x00 0x00000000/0x0000 -> 0x00000000/0x0000
cramster# ipfw pipe show 2
00002: 150.000 Kbit/s 2000 ms 10 sl. 0 queues (1 buckets) droptail
mask: 0x00 0x00000000/0x0000 -> 0x00000000/0x0000
Are those masks valid? Do I need to configure a queue explicitly
before passing these commands?
Thanks again,
Fargo
_______________________________________________
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-net
To unsubscribe, send any mail to "[EMAIL PROTECTED]"
