On 2006.07.08 13:24:41 -0400, Scott Ullrich wrote:
> On 7/8/06, Andre Santos <[EMAIL PROTECTED]> wrote:
> >Are there any known compatibility problems between dummynet and PF rdr 
> >rules?
> >When I try to combine both, the packets seem to simply disappear.
> [snip]
> 
> I can confirm this behavior.   Glad someone else noticed as it would
> happen when we try to use dummynet traffic shaping + pf on pfSense.
> Never really was a high priority to nail down exactly what combination
> of dummynet + pf was breaking it.   If anyone needs me to test
> patches, just let me know.

I also noticed problems when trying to use dummynet/ipfw and pf.  I
looked a bit at it and it seemed that packets, which got queued in
dummynet, were not matched by pf's state engine when re-injected from
dummynet.  At least I saw a lot of denied packets which shouldn't have
been denied on pflog.  It wasn't very important for me to get this
working, so I haven't looked more at it.

-- 
Simon L. Nielsen

Attachment: pgpTaKwCHU5ZI.pgp
Description: PGP signature

Reply via email to