using ipfw and ipf/ipnat together
nelis at 8ball.co.za
Mon Feb 16 23:58:02 PST 2004
I would like to make use of ipfw/dummynet traffic shaper and use it
together with ipnat/ipf's filtering. Hope this is possible ? This is a
personal preference so no need to tell me why I should just use ipfw
Can someone suggest what I would or would not need to use in my rc.conf
and kernel please. I have selected the following ( FreeBSD 5.2R ):
options IPFILTER #ipfilter support
options IPFILTER_LOG #ipfilter logging
options PFIL_HOOKS #required by IPFILTER
options IPFILTER_DEFAULT_BLOCK #block all packets by default
options IPFIREWALL #firewall
options IPFIREWALL_DEFAULT_TO_ACCEPT #allow everything by default
options DUMMYNET #bandwidth limiter
options IPSTEALTH #support for stealth forwarding
Seeing as though I'm not using ipfw filtering I thought I could just
allow everything through by default. Will dummynet still work if
IPFIREWALL_DEFAULT_TO_ACCEPT is set ?
Any suggestions appreciated.
"Unix IS user friendly.. It's just selective about who its friends are."
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Size: 187 bytes
Desc: This is a digitally signed message part
Url : http://lists.freebsd.org/pipermail/freebsd-questions/attachments/20040217/88205f58/attachment.bin
More information about the freebsd-questions