ipfw fwd: woud it be possible to continue processing rest of rules after match ?

2005-06-15 Thread Ari Suutari
Hi, Currently the ipfw fwd rules work so that the packet is accepted when fwd rule matches. Would it be possible just tag the packet with information about next_hop and just continue processing the rules ? This would make complex rulesets with policy-based routing much simpler, since one could j

Re: ipfw and ipsec processing order for outgoing packets wrong

2005-07-02 Thread Ari Suutari
Hi, The counters for queue 1 keeps increasing when I do a ftp out even for non-ACK packets but the other counters for queue 2-4 doesn't move at all so it seems like everything is going out one queue instead of what the rules actually say. I have one pipe configured as 480Kbit/sec which is what r

Getting kern/82724 (ipfw defaultroute/setnexthop) committed

2006-04-20 Thread Ari Suutari
Hi, I have now been running two firewalls with patch included in kern/82724 since the pr was created (since june, 2005). Works ok, not a single panic or other problem. I'm now looking for updating to newer FreeBSD and found out that this hasn't been committed to cvs yet. Could someone with comm