kern/80642: [patch] IPFW small patch - new RULE OPTION

Andrey V. Elsukov elsukov at rdu.kirov.ru
Fri May 27 03:20:05 PDT 2005


The following reply was made to PR kern/80642; it has been noted by GNATS.

From: "Andrey V. Elsukov" <elsukov at rdu.kirov.ru>
To: freebsd-bugs at FreeBSD.org
Cc:  
Subject: Re: kern/80642: [patch] IPFW small patch - new RULE OPTION
Date: Tue, 24 May 2005 03:50:06 GMT

 The following reply was made to PR kern/80642; it has been noted by GNATS.
 
 From: "Andrey V. Elsukov" <elsukov at rdu.kirov.ru>
 To: bug-followup at FreeBSD.org, bu7cher at yandex.ru
 Cc:  
 Subject: Re: kern/80642: [patch] IPFW small patch - new RULE OPTION
 Date: Tue, 24 May 2005 07:42:53 +0400
 
  Sorry, my english is bad.  :(
  
  Patch to IPFW2 for adding restrictions of the traffic with use IPFW
  bytes counters.
  It include two parts:
  
  * First part is ipfw_bound.patch, this part add ipfw rule options "bound
  VALUE" and "check-bound NUM".
  Example:
  # ipfw add 100 allow ip from any to any bound 10K
  # ipfw add 200 deny ip from any to any
  
  While bytes counter of rule 100 below 10 KBytes, it work.
  
  Example:
  # ipfw add 100 allow ip from A.B.C.D to any out xmit internet
  check-bound 200
  # ipfw add 200 allow ip from any to A.B.C.D in recv internet bound 100M
  # ipfw add 300 deny ip from any to any via internet
  
  While bytes counter of rule 200 below 100 MBytes, rules 100 and 200 work.
  NOTE: Check-bound option search rule NUM like "ipfw skipto", but if rule
  NUM not contain bound option, then match fail.
  
  Second part is bound_change.patch, this part add control call to ipfw
  for boundary value change without bytes counter reset.
  Syntax:
  # ipfw bound NUM [set N] change VALUE.
  
  Files:
  For CURRENT:
  http://butcher.heavennet.ru/ipfw_bound/CURRENT/ipfw_bound.patch
  http://butcher.heavennet.ru/ipfw_bound/CURRENT/bound_change.patch
  
  For RELENG_5:
  http://butcher.heavennet.ru/ipfw_bound/RELENG_5/ipfw_bound.patch
  http://butcher.heavennet.ru/ipfw_bound/RELENG_5/bound_change.patch
  
  For RELENG_5_4:
  http://butcher.heavennet.ru/ipfw_bound/RELENG_5_4/ipfw_bound.patch
  http://butcher.heavennet.ru/ipfw_bound/RELENG_5_4/bound_change.patch
  
  -- 
  WBR, Andrey V. Elsukov
  
 _______________________________________________
 freebsd-bugs at freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-bugs
 To unsubscribe, send any mail to "freebsd-bugs-unsubscribe at freebsd.org"


More information about the freebsd-bugs mailing list