Olá pessoal
Poderiam dar uma olhada nessas regras de Firewall Freebsd 7.1 IPFW,
nao to conseguindo limitar a banda de cada ip dessa mascara
# Libera passagem de pacotes
${fwcmd} disable one_pass
${fwcmd} add skipto 2000 all from any to any 53,3128
${fwcmd} add skipto 2000 all from 172.18.0.2 to any
# Libera 172.18.0.2 (Servidor de DNS interno Active directory)
${fwcmd} add skipto 2000 all from any to 172.18.0.2
# Limita banda por ip da rede 172.18.0.0/16
${fwcmd} add 1500 pipe 1 src-ip ${inet}:${imask} out
${fwcmd} add 1501 pipe 2 dst-ip ${inet}:${imask} in
${fwcmd} pipe 1 config mask src-ip 0x0000ffff bw 600Kbit/s queue
10Kbytes
${fwcmd} pipe 2 config mask dst-ip 0x0000ffff bw 600Kbit/s queue
10Kbytes
# Stop RFC1918 nets on the outside interface
${fwcmd} add 2000 deny all from any to 10.0.0.0/8 via ${oif}
${fwcmd} add deny all from any to 172.16.0.0/12 via ${oif}
${fwcmd} add deny all from any to 192.168.0.0/16 via ${oif}
# Regra do NAT
${fwcmd} add divert natd all from any to any via ${natd_interface}
Obrigado
João B. Corsini
Analista de Suporte
-------------------------
Histórico: http://www.fug.com.br/historico/html/freebsd/
Sair da lista: https://www.fug.com.br/mailman/listinfo/freebsd
