lowercase 'm' with dummynet rate limiting ? Known issue ?

Tobias P. Santos tobias at netconsultoria.com.br
Tue Jan 2 02:57:19 PST 2007


Ensel Sharon wrote:
> Ahh... so unless I am missing something, it would appear that when you put
> a lowercase-m in place, it is just skipped, and:
> 
> ipfw pipe 1 config bw 10mbit/s
> 
> becomes:
> 
> ipfw pipe 1 config bw 10bit/s
> 
> Does that look like an accurate interpretation of what is happening ?
> 
Looks like. To be sure you should read the source code.


> So here's a follow-up question:
> 
> I now have a (remote) system that is now set to 10bit/s rate limiting
> ... now that is awfully slow, but are there any conceivable tcp/ip
> settings that I could apply on a local system here that would allow me to
> ssh into it ?  As it stands now, I cannot ssh into it - the session times
> out.  Any ideas ?
> 
> All I need to do is login and "ipfw delete ..."  :)
> 
You'll probably have to get console access on this box.
There are some tricks you can use next time. From ipfw man page:

To test a ruleset and disable it and regain control if something goes
wrong:

       ipfw set disable 18
       ipfw add NN set 18 ...         # repeat as needed
       ipfw set enable 18; echo done; sleep 30 && ipfw set disable 18

Here if everything goes well, you press control-C before the "sleep" ter-
minates, and your ruleset will be left active.  Otherwise, e.g. if you
cannot access your box, the ruleset will be disabled after the sleep ter-
minates thus restoring the previous situation.

Good luck,
Tobias.


More information about the freebsd-ipfw mailing list