On Wednesday 28 July 2004 23:23, Charlie Schluting wrote: > Hello.. > > I'm running ipf because I like it ...but now I need to use ipfw's pipe > feature. I was thinking that I could just run both, and keep all my > rules in ipf, then in ipfw: limit bandwidth for a few vlans, then allow > all. > > It didn't work (no rate-limiting happened).. and I'm thinking that ipf > is passing the packets and bypassing ipfw? Or something.. > > So, what is the order, if I'm running ipf AND ipfw at the same time? > Will it work at all in this manner?
On the output path (which is the only meaningful for bandwidth limitation) the
order is:
PFIL_HOOKS (== ipf / pf) before
ipfw
Note however, that ipfw will see translated packets! i.e. if you have any
translation/NAT/redirect rules in ipf you need to account for that with your
ipfw rules.
Another alternative (on FreeBSD-current) would be pf+ALTQ, btw ;)
--
/"\ Best regards, | [EMAIL PROTECTED]
\ / Max Laier | ICQ #67774661
X http://pf4freebsd.love2party.net/ | [EMAIL PROTECTED]
/ \ ASCII Ribbon Campaign | Against HTML Mail and News
pgpgjFn7ikpdP.pgp
Description: signature
