Some problems of IP6FW on FreeBSD 8.0-RELEASE

[David Horn]

On Mon, May 17, 2010 at 6:33 AM, Bear <jilingshu at gmail.com> wrote:
> hi all,
> I am a newbie on IPv6. I wanna to build a IPv6 Gateway on FreeBSD 8.0-RELEASE. Thought this gateway need to do some limitations on its clients(It works in a university networks. At least, User Authentication and Bandwith Limitation must be implemented). I wanna to use a Captive Portal to do user authentication and use ip6fw and dummynet to do bandwith control. But in my GENERIC kernel, it seems that there is no ip6fw available.When I type in ip6fw, it told me this:
>
> freebsd6# ip6fw
> ip6fw: Command not found.
> freebsd6#

ip6fw has been depreciated starting with 7.0.  As per the 7.0 Release
notes found here:   http://www.freebsd.org/releases/7.0R/relnotes.html

>>>The ip6fw(8) packet filter has been removed. Since ipfw(4)  has gained IPv6 support, it should be used >>>instead. Please note that some rules might need to be adjusted.

Take a look at the FreeBSD handbook for a start on how to use ipfw:
http://www.freebsd.org/doc/en/books/handbook/firewalls-ipfw.html  and IPv6 here:
http://www.freebsd.org/doc/en/books/handbook/network-ipv6.html

And of course, make sure to:  'man 8 ipfw'  for all of the details, or
peruse online here:  http://www.freebsd.org/cgi/man.cgi?query=ipfw

Make certain to read the section labeled "TRAFFIC SHAPER (DUMMYNET)
CONFIGURATION"

Good Luck.

-_Dave

>
> So I wanna know is the ip6fw has been compiled into the GENERIC kernel? If not, how can I compile it into kernel or as a loadable kernel module? And what about the dummynet? If dummynet unavailable, can you give me some advises to limit bandwith?