ipfw2/dummynet + ipfilter not working together ?

Artur Pydo artur at pydo.org
Mon Oct 6 14:20:30 PDT 2003


Hi,

I have 4.9-RC router on a ADSL access and currently using ipfilter for
statefull filtering+nat that is working well. ipfw2 is configured for a
long time with a "pass all" policy.

When i try to configure a pipe with queues for traffic shaping
as described in the following message (see URL) the TCP connection
gets frozen :

http://mail.gnu.org/archive/html/mldonkey-users/2003-01/msg00911.html

I tried to diagnose what happens and discovered that some packets
are said "accepted" by IPfilter but never gets out of tun0 with
pipe/queue activated.

If i delete all IPFilter rules (pass all policy) traffic shaping is
working right. Everything is working fine if i flush all pipes/queues
from ipfw2 configuration but i have no traffic shaping. :/

So, my question is : Is there some incompatabilities between
ipfw2/dummynet and IPFilter or maybe there is a bug somewhere ?

-- 

Best regards,

Artur Pydo.



More information about the freebsd-questions mailing list