DummyNet in Bridge mode help

[Michael Rutman]

Thanks.  Not sure why these 3 commands work where my 2 did not.  I guess
the queue is what matters.

Whatever it was it now works.

Much appreciated.

At 8:32 AM -0700 9/22/06, <unixtools at hotmail.com> wrote:
>Hi,
>
>pipe 2 config delay 5000ms
>queue 100 config pipe 2 weight 100
>add 2 queue 100 icmp from any to any
>
>The above rules work like a charm.
>
>Below is the ping after the pipe. I have changed the ip address
>
>#ping XXX.XX.XX.XX
>64 bytes from XXX.XX.XX.XX: icmp_seq=88 ttl=48 time=5138.269 ms
>64 bytes from XXX.XX.XX.XX: icmp_seq=89 ttl=48 time=5150.124 ms
>64 bytes from XXX.XX.XX.XX: icmp_seq=90 ttl=48 time=5163.875 ms
>64 bytes from XXX.XX.XX.XX: icmp_seq=91 ttl=48 time=5149.844 ms
>64 bytes from XXX.XX.XX.XX: icmp_seq=97 ttl=48 time=202.380 ms
>64 bytes from XXX.XX.XX.XX: icmp_seq=98 ttl=48 time=275.423 ms
>64 bytes from XXX.XX.XX.XX: icmp_seq=99 ttl=48 time=156.222 ms
>
>I removed the pipe after the 4th ping and it came back to the normal.
>
>-Sunil Sunder Raj
><http://daemon.in>http://daemon.in
>
>----- Original Message -----
>From: "Michael Rutman" <mrutman at widevine.com>
>To: <freebsd-ipfw at freebsd.org>
>Sent: Thursday, September 21, 2006 11:56 PM
>Subject: DummyNet in Bridge mode help
>
>
>>
>> I am unable to get dummynet to do anything for me
>>
>> I am using FreeBSD 6.1.
>>
>> I recompiled the kernel to add these options:
>>
>> options IPFIREWALL
>> options IPFIREWALL_VERBOSE
>> options IPFIREWALL_VERBOSE_LIMIT
>> options DUMMYNET
>> options HZ=1000
>> options NMBCLUSTERS=65535
>> options BRIDGE
>> options IPFIREWALL_DEFAULT_TO_ACCEPT
>>
>>
>> I set these options to 1, though not at boot time, does that matter?
>>
>> net.link.ether.bridge.ipfw: 1
>> net.link.ether.bridge.enable: 1
>> net.link.ether.bridge.config: em1,bge0
>> net.link.ether.bridge_ipfw: 1
>> net.link.ether.bridge_cfg: em1,bge0
>> net.link.ether.ipfw: 1
>> net.inet.ip.fw.enable: 1
>> net.inet.ip.fw.one_pass: 1
>> net.inet.ip.fw.debug: 1
>> net.inet.ip.fw.verbose: 1
>> net.inet.ip.fw.verbose_limit: 10000
>>
>>
>> At this point I can ping through the bridge.  I can take the bridge down
>> and see the pings stop, bring it back up and see them continue, so I know
>> the packets go through it.
>>
>> I then do
>>
>> ipfw add pipe 1 ip from any to any
>> ipfw pipe config 1 delay 5000ms
>>
>> The pings do not slow down at all.
>>
>> Any suggestions for what I'm doing wrong?
>>
>> Thanks
>> _______________________________________________
>> freebsd-ipfw at freebsd.org mailing list
>>
>><http://lists.freebsd.org/mailman/listinfo/freebsd-ipfw>http://lists.freebsd.org/mailman/listinfo/freebsd-ipfw
>> To unsubscribe, send any mail to "freebsd-ipfw-unsubscribe at freebsd.org"
>>