would you like to explain this ?
i'm very interesting of that..
Wassalam...
Royyana M. Ijtihadie
--
:) 1+1 = 4/2
On Mon, 15 Jan 2001, Clemens Hermann wrote:
> Hi together,
>
[Clemens Hermann]
> I used ipfw to do the filtering before but I needed IP-accounting and
> for this purpose ipf does a pretty cool job. In combination with ipacct
> I get a perfect report (devices, in-out, etc.). To drop ipf I would need
> something similar to do this with ipfw. Is there a way to
Am 16.01.2001 um 10:22:23 schrieb Luigi Rizzo:
Hi Luigi,
hopefully you are not nerved by my continuing question, but there is still one
thing I did not dompletely understand.
> if ipf says no it says no. you just want tobe sure that
> the packet actually passes through both things.
I just do
Am 16.01.2001 um 09:54:55 schrieb Luigi Rizzo:
Hi Luigi,
first thanks for your hints,
> > so it is definitely impossible that a packet that passes ipfw (as every
> > packet does) enters the system even if ipf says "no", right?
>
> you have to look at the order of invokation of ipfw and ipfw
>
> so it is definitely impossible that a packet that passes ipfw (as every
> packet does) enters the system even if ipf says "no", right?
you have to look at the order of invokation of ipfw and ipfw
in the kernel (/sys/netinet/ip_{input,output}.c) to make
sure what happens.
> I have some addition
Am 16.01.2001 um 17:38:46 schrieb Martin Eggen:
Hi Martin,
thanks a lot for your hints.
> You might want to take a look at ALTQ[0] from the KAME people, or just use
> ipfw with a default pass all rule (or IPFIREWALL_DEFAULT_ACCEPT), so that
> it's only used for bw limiting. (The packets will th
[Clemens Hermann]
> Hi together,
>
> for quite a while I have been looking around for a way to limit the bandwith
> for each IP that accesses my server. I want to slow down any connektion
> to 128 KBit/s.
> The only thing I found was Dummynet in combination with ipfw. I am using
> ipf as firewall
