ipfw and ipsec processing order for outgoing packets wrong

[Vincent Poy]

On Mon, 1 Nov 2004 05:13:21 -0800, Vincent Poy <vincepoy at gmail.com> wrote:
> On Mon, 1 Nov 2004 14:20:10 +0200, Ari Suutari <ari at suutari.iki.fi> wrote:
> 
> 
> > > The counters for queue 1 keeps increasing when I do a ftp out even for
> > > non-ACK packets but the other counters for queue 2-4 doesn't move at
> > > all so it seems like everything is going out one queue instead of what
> > > the rules actually say.  I have one pipe configured as 480Kbit/sec
> > > which is what rules 63005-63008 does.
> >
> >    Are you using IPsec ?
> >
> >        Ari S.
> 
> Nope... As you can see, I'm just using ipfw2 with dummynet for
> pipe/queue just for traffic shaping.

Maybe this will explain it better as this was what my rules are based on:

http://www.topfx.com/prioritizingackfreebsd.shtml