Hi, Thank you for the help. sysctl net.inet.ip.fw.one_pass=0 introduces some issues to my configuration limits in my current configuration, because limits aren't applied correctly since we continue after the pipe, eg: i had: 1900 pipe 1000 all from x.y.z.1 to any 2000 pipe 1001 all from any to x.y.z.1 2100 pipe 2000 all from x.y.z.0/24 to any 2100 pipe 2001 all from any to x.y.z.0/24 . . more pipes . .. 6500 allow all from any to any
so the I had special limit(large) for x.y.z.1 IP but another limit in the whole /24 that i didn't want it to affect. any ideas how to solve it? i thought about skipto but I'm not sure how to use. Sami On Sun, Jan 6, 2013 at 1:37 AM, Luigi Rizzo <[email protected]> wrote: > On Sat, Jan 05, 2013 at 02:51:07PM +0200, Sami Halabi wrote: > > Hi Luigi & Ozkan, > > > > Thanks for the response. > > > > Luigi i saw you said in some list never trust italians :), so i went step > > by step. > > first i put: > > me out from a pipe > > > > sysctl net.inet.ip.fw.one_pass=0 > > ipfw pipe 123 config bw 1Mbit/s mask all > > ipfw add 100 pipe 123 out > > > > ipfw add 120 allow ip from any to any > > > > Works like a charm. > > > > Next Step wil be: > > ipfw pipe 456 config bw 10Mbit/s > > > > ipfw sched 789 config mask all pipe 123 > > or it should be: > > ipfw sched 789 config mask all pipe 456 > > the latter. > > > ipfw add 110 queue 789 out > > > > > > whats is the correct configuration ? > > > > the mask options isn't well documented, in the handbook its not even > > mentiond. > > the manpage is slightly more up to date. > The handbook is probably years behind. > > cheers > luigi > > > same goes for scheduler... > > I got the feeling that only few here know the options very welll... maybe > > I'm wrong? > > > > Sami > > > > > > > > On Thu, Jan 3, 2013 at 12:46 PM, ?zkan KIRIK <[email protected]> > wrote: > > > > > I think there is a mistake at the sched config line. it should be as > > > ipfw sched 789 config mask all pipe 456 > > > > > > > > > On Thu, Jan 3, 2013 at 10:29 AM, Luigi Rizzo <[email protected]> > wrote: > > > > > >> ipfw sched 789 config mask all pipe 123 > > > > > > > > > > > > > > > -- > > Sami Halabi > > Information Systems Engineer > > NMS Projects Expert > > FreeBSD SysAdmin Expert > -- Sami Halabi Information Systems Engineer NMS Projects Expert FreeBSD SysAdmin Expert _______________________________________________ [email protected] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-ipfw To unsubscribe, send any mail to "[email protected]"
