Current problem reports assigned to freebsd-ipfw@FreeBSD.org

2009-04-27 Thread FreeBSD bugmaster
Note: to view an individual PR, use: http://www.freebsd.org/cgi/query-pr.cgi?pr=(number). The following is a listing of current problems submitted by FreeBSD users. These represent problem reports covering all versions including experimental development code and obsolete releases. S Tracker

Re: IPFW MAX RULES COUNT PERFORMANCE

2009-04-27 Thread Daniel Dias Gonçalves
Julian, You could give an example of rules with tables? Julian Elischer escreveu: Daniel Dias Gonçalves wrote: Very good thinking, congratulations, but my need is another. The objective is a Captive Porrtal that each authentication is dynamically created a rule to ALLOW or COUNT IP

Re: IPFW MAX RULES COUNT PERFORMANCE

2009-04-27 Thread Daniel Dias Gonçalves
What may be happening ? I'm with polling enabled on all interfaces, can you influence ? em0: Intel(R) PRO/1000 Network Connection 6.9.6 port 0x7000-0x703f mem 0xdfa0-0xdfa1 irq 16 at device 8.0 on pci4 em1: Intel(R) PRO/1000 Network Connection 6.9.6 port 0x7400-0x743f mem

Re: IPFW MAX RULES COUNT PERFORMANCE

2009-04-27 Thread Daniel Dias Gonçalves
Going to another example. If I wanted that each authentication (username and password) in captive portal, set up rules limiting the speed of the user's IP, as I do? I can create two rules for the in / out for each user associated with a pipe? When simulating this with a script adding hundreds

Re: IPFW MAX RULES COUNT PERFORMANCE

2009-04-27 Thread Adrian Chadd
You may want to investigate using pf; i'm not sure whether they handle this better. Me, I'd investigate writing a tree ipfw rule type. Ie, instead of having a list of rules, all evaluated one at a time, I'd create a rule implementing a subrule match on ip/netmask with some kind of action (allow,

Re: IPFW MAX RULES COUNT PERFORMANCE

2009-04-27 Thread Ian Smith
On Mon, 27 Apr 2009, Daniel Dias Gonçalves wrote: What may be happening ? I'm with polling enabled on all interfaces, can you influence ? em0: Intel(R) PRO/1000 Network Connection 6.9.6 port 0x7000-0x703f mem 0xdfa0-0xdfa1 irq 16 at device 8.0 on pci4 em1: Intel(R) PRO/1000