>
> reading ipfw-classifyd divert socket sendto() with packet sin_port set
> to flow->if_fwrule (ftp == 1000 for instance), was expecting ipfw
> would continue with next rule which is 1010 in above. But ipfw seems
> to have continue with matching rule 500.
>
with further looking, divert and ipfw r
-
ipfw add 100 divert tcp from any to any via em0ipfw add 101
divert udp from any to any via em0
ipfw add 500 allow altq root_em0 ip from any to any via em0
ipfw add 1010 modip dscp:AF11 ip from any to any out divertedipfw add
1020 allow altq ftp ip from any to any out diverted
65535
On Mon, 19 Dec 2011, alan yang wrote:
> Hi Marcelo,
>
> Thanks for the modip work!
I still haven't found any docs like the manpage patches or even a clear
description. I know such things seem obvious to the programmer :) but
a few examples really don't cut it for me, even with reference to
Hi Marcelo,
Thanks for the modip work!
I am trying to see:
- ipfw rule to divert traffic for ipfw-classifyd
- ipfw-classifyd to classify specific traffic: ftp, sip, ...etc.
- ipfw-classifyd to reinject traffic with sin-port set according
to application flow (ftp == 1000, sip ==
2011/12/8 Ian Smith
> On Thu, 8 Dec 2011, Marcelo Araujo wrote:
> > 2011/12/8 Ian Smith
>
> .. but I couldn't find that?
>
>
Hi Ian,
Here bellow there are some examples how you can use the modip:
*ipfw add 10 modip tos:lowdelay ip from any to any
ipfw add 11 modip dscp:af14 ip from any to any
On Thu, 8 Dec 2011, Marcelo Araujo wrote:
> 2011/12/8 Ian Smith
>
> >
> > The PR you pointed to (kern/102471) includes some description, update to
> > ipfw(8) and some references. It doesn't mention any 'modip' action. I
> > can't guess what 'modip' is even supposed to mean, let alone how
2011/12/8 Ian Smith
>
> The PR you pointed to (kern/102471) includes some description, update to
> ipfw(8) and some references. It doesn't mention any 'modip' action. I
> can't guess what 'modip' is even supposed to mean, let alone how it's
> supposed to work?
>
>
Hi Ian,
Here is the patch:
ht
On Tue, 6 Dec 2011, alan yang wrote:
> Hi Sergey,
>
> I found from FreeBSD forum dated Aug. 2009 with the following:
>
> vlad2005
Insufficient information to locate a forum post. URL, please?
> ...
> Anyway, testing with improvement from patch, give desired result.
> Code:
> ipfw add
Hello Marcelo!
I confirm that this patch is highly needed by lot of freebsd users.
> Hi guys,
>
> The modip was a patch that I wrote at 2008. A lot of people asked me to
> re-write it, as I came(last week) from a long trip to ASIA(4 months), I’m
> trying to find time to re-write it, but in other h
Hi guys,
The modip was a patch that I wrote at 2008. A lot of people asked me to
re-write it, as I came(last week) from a long trip to ASIA(4 months), I’m
trying to find time to re-write it, but in other hand, regards the
Christmas Day and the new year, and also my master degree, I don’t believe
I
Hi Sergey,
I found from FreeBSD forum dated Aug. 2009 with the following:
vlad2005
...
Anyway, testing with improvement from patch, give desired result.
Code:
ipfw add 20 count ip from any to any dscp AF11
Show command from ipfw look ok.
Code:
freebsd# ipfw show
00010 959 82291 modip dscp:AF11 i
06.12.2011 5:20, alan yang wrote:
Hello,
Running FreeBSD 8.2 release with ipfw command: "ipfw add 10 count ip
from any to any dscp AF11" gives:
ipfw: unrecognized option [49] dscp
wonder people could shed some light if 8.2 release has ipfw support of dscp?
o kern/102471 ipfw [ipfw] [pat
Hello,
Running FreeBSD 8.2 release with ipfw command: "ipfw add 10 count ip
from any to any dscp AF11" gives:
ipfw: unrecognized option [49] dscp
wonder people could shed some light if 8.2 release has ipfw support of dscp?
o kern/102471 ipfw [ipfw] [patch] add tos and dscp support
above
13 matches
Mail list logo
