freebsd-ipfw Digest, Vol 39, Issue 3
Liam Foy
liamfoy at sepulcrum.org
Fri Dec 19 16:30:35 PST 2003
freebsd-ipfw-request at freebsd.org wrote:
>Send freebsd-ipfw mailing list submissions to
> freebsd-ipfw at freebsd.org
>
>To subscribe or unsubscribe via the World Wide Web, visit
> http://lists.freebsd.org/mailman/listinfo/freebsd-ipfw
>or, via email, send a message with subject or body 'help' to
> freebsd-ipfw-request at freebsd.org
>
>You can reach the person managing the list at
> freebsd-ipfw-owner at freebsd.org
>
>When replying, please edit your Subject line so it is more specific
>than "Re: Contents of freebsd-ipfw digest..."
>
>
>Today's Topics:
>
> 1. Re: IPFW for IPv6 (Hideki Yamamoto)
> 2. Re: IPFW for IPv6 (Luigi Rizzo)
> 3. Dummynet pipes and MRTG (Ganbold)
>
>
>----------------------------------------------------------------------
>
>Message: 1
>Date: Fri, 19 Dec 2003 08:06:02 +0900 (JST)
>From: Hideki Yamamoto <yamamoto436 at oki.com>
>Subject: Re: IPFW for IPv6
>To: rizzo at icir.org
>Cc: freebsd-ipfw at freebsd.org
>Message-ID: <20031219.080602.26517061.yamamoto436 at oki.com>
>Content-Type: Text/Plain; charset=us-ascii
>
>
>Dear Luigi,
>
>I am very happy to hear that you and your student are working
>on this matter. I hope you will release the beta or something
>as soon as possible.
>By the way, does it run on FreeBSD 5.1 base or 4.9?
>
>Regards,
>Hideki Yamamoto
>
>From: Luigi Rizzo <rizzo at icir.org>
>Subject: Re: IPFW for IPv6
>Date: Thu, 18 Dec 2003 08:26:05 -0800
>Message-ID: <20031218082605.A2252 at xorpc.icir.org>
>
>
>
>>On Fri, Dec 19, 2003 at 01:12:13AM +0900, Hideki Yamamoto wrote:
>>
>>
>>>Hi,
>>>
>>>I am interested in ipfw for IPv6, especially on dummynet.
>>>Does someone have information on ipfw for IPv6?
>>>
>>>
>>Two students of mine have a basically working version of
>>ipfw2 for ipv6 (with dummynet too). I need to review the code
>>before making patches available, though.
>>
>>In the detail, the layer2 version of the code (where ipv6 fields
>>are matched within ether_input()/ether_output(), are ok,
>>whereas the layer3 version (call from ip6input(), ip6output())
>>need a bit more debugging when used with dummynet because suspending
>>and resuming computation within ip6output() is tricky for the
>>amount of state around -- that was time consuming in ipv4 as well.
>>
>> cheers
>> luigi
>>
>>
>
>------------------------------
>
>Message: 2
>Date: Fri, 19 Dec 2003 01:37:20 -0800
>From: Luigi Rizzo <rizzo at icir.org>
>Subject: Re: IPFW for IPv6
>To: Hideki Yamamoto <yamamoto436 at oki.com>
>Cc: freebsd-ipfw at freebsd.org
>Message-ID: <20031219013720.C2830 at xorpc.icir.org>
>Content-Type: text/plain; charset=us-ascii
>
>On Fri, Dec 19, 2003 at 08:06:02AM +0900, Hideki Yamamoto wrote:
>
>
>>Dear Luigi,
>>
>>I am very happy to hear that you and your student are working
>>on this matter. I hope you will release the beta or something
>>as soon as possible.
>>By the way, does it run on FreeBSD 5.1 base or 4.9?
>>
>>
>
>it is 4.9 but since it is based on ipfw2 there should be
>no trouble in porting it to 5.x which is something we plan to
>do as well.
>
> cheers
> luigi
>
>
>
>>Regards,
>>Hideki Yamamoto
>>
>>From: Luigi Rizzo <rizzo at icir.org>
>>Subject: Re: IPFW for IPv6
>>Date: Thu, 18 Dec 2003 08:26:05 -0800
>>Message-ID: <20031218082605.A2252 at xorpc.icir.org>
>>
>>
>>
>>>On Fri, Dec 19, 2003 at 01:12:13AM +0900, Hideki Yamamoto wrote:
>>>
>>>
>>>>Hi,
>>>>
>>>>I am interested in ipfw for IPv6, especially on dummynet.
>>>>Does someone have information on ipfw for IPv6?
>>>>
>>>>
>>>Two students of mine have a basically working version of
>>>ipfw2 for ipv6 (with dummynet too). I need to review the code
>>>before making patches available, though.
>>>
>>>In the detail, the layer2 version of the code (where ipv6 fields
>>>are matched within ether_input()/ether_output(), are ok,
>>>whereas the layer3 version (call from ip6input(), ip6output())
>>>need a bit more debugging when used with dummynet because suspending
>>>and resuming computation within ip6output() is tricky for the
>>>amount of state around -- that was time consuming in ipv4 as well.
>>>
>>> cheers
>>> luigi
>>>
>>>
>>_______________________________________________
>>freebsd-ipfw at freebsd.org mailing list
>>http://lists.freebsd.org/mailman/listinfo/freebsd-ipfw
>>To unsubscribe, send any mail to "freebsd-ipfw-unsubscribe at freebsd.org"
>>
>>
>
>------------------------------
>
>Message: 3
>Date: Fri, 19 Dec 2003 19:14:39 +0800
>From: Ganbold <ganbold at micom.mng.net>
>Subject: Dummynet pipes and MRTG
>To: freebsd-ipfw at freebsd.org
>Cc: firewalls at securityfocus.com
>Message-ID: <6.0.0.22.2.20031219190701.02927da0 at 202.179.0.80>
>Content-Type: text/plain; charset="us-ascii"; format=flowed
>
>Hi,
>
>I need to view the traffic utilization of dummynet pipes in ipfw2. I'm
>using FreeBSD 5.2 current.
>I'm also using MRTG to draw graphics from ipfw show rule-number command.
>Is there any method or program like MRTG to draw bandwidth utilizations of
>dummynet pipes?
>Can I use MRTG for this purpose?
>I hope somebody in this list point me to the right direction.
>
>thanks in advance,
>
>Ganbold
>
>
>------------------------------
>
>_______________________________________________
>freebsd-ipfw at freebsd.org mailing list
>http://lists.freebsd.org/mailman/listinfo/freebsd-ipfw
>To unsubscribe, send any mail to "freebsd-ipfw-unsubscribe at freebsd.org"
>
>End of freebsd-ipfw Digest, Vol 39, Issue 3
>*******************************************
>
>
>
On Fri, Dec 19, 2003 at 01:12:13AM +0900, Hideki Yamamoto wrote:
>Hi,
>
>I am interested in ipfw for IPv6, especially on dummynet.
>Does someone have information on ipfw for IPv6?
>
>
Two students of mine have a basically working version of
ipfw2 for ipv6 (with dummynet too). I need to review the code
before making patches available, though.
In the detail, the layer2 version of the code (where ipv6 fields
are matched within ether_input()/ether_output(), are ok,
whereas the layer3 version (call from ip6input(), ip6output())
need a bit more debugging when used with dummynet because suspending
and resuming computation within ip6output() is tricky for the
amount of state around -- that was time consuming in ipv4 as well.
cheers
luigi
Once you have a somewhat stable working model of it running, I would
be pleased to test it before releasing it:).
Liam-Foy
More information about the freebsd-ipfw
mailing list