limiting bandwith

[Ludo Koren]

     > i think it is pilot error.

I do not argue. yes, it probably is.

     > Be warned that dynamic rules only match addresses and ports, so
     > once a rule is installed it will match traffic both in and out.
     > If you want to select on other attributes you have to do it
     > before you hit any keep-state or check-state rule.

     > I don't know if it matches recent reports about dummynet on
     > 5.2.1 giving half the bandwidth, but i just checked locally and
     > it does work as expected -- the bandwidth is correct (with a
     > correct ipfw config, that is :)

I just cannot put together rules, that do what I want. If I omit
keep-state from the rule:

add pipe 20 tcp from B to A dst-port 25 out xmit xl1 keep-state

it stops working. Basically, I am lost...

     > 	cheers luigi

lk