Am 25.06.2006 um 07:55 schrieb Jax:
Anyone can give me a real life example, full ipfw traffic shaping
ruleset or something like that.
FWIW, here's the shaping section from my ipfw setup. I'm behind an
ADSL2 line, so I don't care about downstream bandwidth, but I do
about the upstream. Thi
David Gilbert wrote:
No. round-robin will deliver packets out-of-order. TCP will behave
very badly with this (at the very least, smart selective-ack hosts
will transmit a lot of selective-ack packets --- but dumb
non-selective-ack hosts will start asking for a lot of
retransmission). Other pr
> "ISO" == ISO writes:
ISO> David Gilbert wrote:
>> No. round-robin will deliver packets out-of-order. TCP will
>> behave very badly with this (at the very least, smart selective-ack
>> hosts will transmit a lot of selective-ack packets --- but dumb
>> non-selective-ack hosts will start as
David DeSimone wrote:
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Michael Vince <[EMAIL PROTECTED]> wrote:
The main reason to use IPSEC tunnel mode and avoid GIF is that such
a config is interoperable with other IPSEC implementations, and thus
is much more useful in the real world.
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Michael Vince <[EMAIL PROTECTED]> wrote:
>
> After reloading ipsec and racoon I tried to do a traceroute from a
> client behind the local gateway to a client behind the remote gateway,
> it went off and did a typical traceroute through the gateway out
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
David DeSimone <[EMAIL PROTECTED]> wrote:
>
> Hmm... In examining my kernel configuration I found these options:
>
> options IPSEC
> options IPSEC_ESP
> options IPSEC_DEBUG
> # options IPSEC_FILTERGIF
> # options F
