freebsd shaper

2003-10-10 Thread Aleksandar Simonovski
Hi, This is my scenario, now it is working on Slackware 9.1 with CBQ but i wanna do it on FreeBSD 5.1 1.- | 2.- | <---> HUB <-> ETH1 <--- SHAPER ---> ETH0 <-> INTERNET 3.- | 4.- 1,2,3 and 4

freebsd+natd+ipfw+DENY P2P

2003-10-20 Thread Aleksandar Simonovski
Hi, i wanna allow SSH,SMTP,DNS,WWW,POP3 and nothing else :) on my freebsd gateway, my local net is 192.168.1.0/24 and nat is working fine the point is the deny any P2P applications, and allow normal trafic like SMTP,POP3,WWW,FTP,ICQ. So any suggestions how to do this with ipfw and check-state,esta

natd+ipfw+trafic shaping

2003-10-21 Thread Aleksandar Simonovski
Hi all, can anyone explane why this rules doesn't work: rl0 EXTINF rl1 INTINF add 1000 divert 8668 ip from any to any via rl0 add 1200 allow ip from any to any via lo0 add 1300 deny ip from any to 127.0.0.1/8 add 1400 deny ip from 127.0.0.1/8 to any add 1500 check-state add 1550 allow icmp from a

gateway/firewall script

2003-10-22 Thread Aleksandar Simonovski
this is my script, works just fine, it's purpose is to allow just www,ftp and dns requests but i get only 6KB/s transfer with config bw 128Kbit/s, and 3KB/s with 64Kbit/s and so on and it should be 16KB/s with 128Kbit/s and 8KB/s with 64Kbit/s and do on so is this right or i'am missing something

Re: gateway/firewall script

2003-10-23 Thread Aleksandar Simonovski
On Wed, 22 Oct 2003 20:29:10 -0700 Jonathan Feally <[EMAIL PROTECTED]> wrote: > Your problem lies in that you are counting the traffic twice in the > queue/pipe - once from the internal addr to the dst, and once from the > external addr to the dst. Change your rules to specify which IP Block >