ipfw and ipsec processing order for outgoing packets wrong

Vincent Poy vincepoy at gmail.com
Mon Nov 1 05:13:22 PST 2004


On Mon, 1 Nov 2004 14:20:10 +0200, Ari Suutari <ari at suutari.iki.fi> wrote:
> > The counters for queue 1 keeps increasing when I do a ftp out even for
> > non-ACK packets but the other counters for queue 2-4 doesn't move at
> > all so it seems like everything is going out one queue instead of what
> > the rules actually say.  I have one pipe configured as 480Kbit/sec
> > which is what rules 63005-63008 does.
> 
>    Are you using IPsec ?
> 
>        Ari S.

Nope... As you can see, I'm just using ipfw2 with dummynet for
pipe/queue just for traffic shaping.

Cheers,
Vince


More information about the freebsd-current mailing list