[FreeBSD 5.2] Bandwith and packet throttling

Colin Alston karnaugh at karnaugh.za.net
Sun Aug 15 12:55:53 PDT 2004


>Thanks for the reply. The ICMP was more experiment than anything, I've
>sinced removed it. Here are the results of the show commands:
>
>cramster# ipfw show
>00050 14819576  8458459132 divert 8668 ip from any to any via dc0
>00100      250       32470 allow ip from any to any via lo0
>00200        0           0 deny ip from any to 127.0.0.0/8
>00300        0           0 deny ip from 127.0.0.0/8 to any
>65000 44478701 31835950367 allow ip from any to any
>65100        0           0 pipe 1 ip from 10.0.0.8 to any
>65200        0           0 pipe 2 ip from any to 10.0.0.8
>65535        0           0 deny ip from any to any
>
>  
>
I think you're clearly being a bit silly here.
Remove rules 00200 and 00300 (I dont know why on this green earth you'd 
deny loopback)

Also you've added an "allow all" rule right above your shaping rules. 
You expected them to be effective after you've just told it to allow all 
traffic anyway?

man ipfw

-- 
Colin Alston <karnaugh at karnaugh.za.net>

Quantum Logic Chicken:
  The chicken is distributed probabalistically on all sides of the
  road until you observe it on the side of your course.



More information about the freebsd-net mailing list