Re: incoming bandwidth limiting using ipfilter

2003-01-03 Thread randall ehren
Is there a way to limit incoming traffic (bandwidth) using ipfilter/ipfw or any such software tool?. I am running a mail server and I pay per GB transfered. If I have my ISP do the limiting, they charge extra $$ for it. I know I can limit incoming mail size via the mail server. But still

RE: incoming bandwidth limiting using ipfilter

2003-01-03 Thread charles pelletier
ipfilter won't allow you to limit bandwidth, ipfw will. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Hari Bhaskaran Sent: Friday, January 03, 2003 2:36 PM To: [EMAIL PROTECTED] Subject: incoming bandwidth limiting using ipfilter Hi, Is there a way

Re: incoming bandwidth limiting using ipfilter

2003-01-03 Thread Murat Bicer
Is there anything that limits us from using ipfilter on top of this ipfw b/w control? Is there a way to limit incoming traffic (bandwidth) using ipfilter/ipfw or any such software tool?. you'll want to lookup information on dummynet: http://info.iet.unipi.it/~luigi/ip_dummynet/ you can use

Re: incoming bandwidth limiting using ipfilter

2003-01-03 Thread randall ehren
Is there anything that limits us from using ipfilter on top of this ipfw b/w control? doesn't appear so... from http://home.earthlink.net/~jaymzh666/ipf/IPFfreebsd.html#12: IPF and IPFW both have features I want to use, must I choose between them? No. You can run them both on a single

Re: incoming bandwidth limiting using ipfilter

2003-01-03 Thread Avleen Vig
On Fri, 3 Jan 2003, Murat Bicer wrote: Is there anything that limits us from using ipfilter on top of this ipfw b/w control? Darren Reed, the owner of IPF is probably in the best position to answer that question. I posed it a week ot two ago on the ipf mailing list.. I'm waiting for a reply,

Re: incoming bandwidth limiting using ipfilter

2003-01-03 Thread Hari Bhaskaran
On Fri, Jan 03, 2003 at 12:39:52PM -0800, randall ehren wrote: you'll want to lookup information on dummynet: http://info.iet.unipi.it/~luigi/ip_dummynet/ Does anyone know any hardware (of the size of a regular home DSL router) that can give me a simple limit of X bps for two IP addresses. I

Re: incoming bandwidth limiting using ipfilter

2003-01-03 Thread randall ehren
Does anyone know any hardware (of the size of a regular home DSL router) that can give me a simple limit of X bps for two IP addresses. I am running out of time and removing ipfilter (which I use now) and adding ipfw, learning dummynet and then figuring out will take time (at least 5 days

Re: incoming bandwidth limiting using ipfilter

2003-01-03 Thread randall ehren
Is there anything that limits us from using ipfilter on top of this ipfw b/w control? Darren Reed, the owner of IPF is probably in the best position to answer that question. I posed it a week ot two ago on the ipf mailing list.. I'm waiting for a reply, not sure if it was seen amongst the

RE: incoming bandwidth limiting using ipfilter

2003-01-03 Thread Daniel Goepp
- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of randall ehren Sent: Friday, January 03, 2003 5:29 PM To: Hari Bhaskaran Cc: [EMAIL PROTECTED] Subject: Re: incoming bandwidth limiting using ipfilter Does anyone know any hardware (of the size of a regular home DSL router) that can give

Re: incoming bandwidth limiting using ipfilter

2003-01-03 Thread Hari Bhaskaran
Hari: I think you are going to find that rate-limiting at the box won't provide any fiscal relief. The packets have already traversed your ISP's interface where the accounting is taking place. Mike That's bad. But if the machine doesn't accept more than N packets/sec, why would the ISP

Re: incoming bandwidth limiting using ipfilter

2003-01-03 Thread Avleen Vig
On Fri, 3 Jan 2003, randall ehren wrote: Darren could you answer this question please? Maybe we could get Phil to add the answer to the FAQ. http://www.google.com/search?q=ipfilter+ipfw+together -- http://false.net/ipfilter/2000_02/0407.html This is what we settled with eventually, but

RE: incoming bandwidth limiting using ipfilter

2003-01-03 Thread Daniel Goepp
itself to not exceed your defined bandwidth. -Daniel -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Hari Bhaskaran Sent: Friday, January 03, 2003 6:24 PM To: [EMAIL PROTECTED] Subject: Re: incoming bandwidth limiting using ipfilter Hari: I think you

Re: incoming bandwidth limiting using ipfilter

2003-01-03 Thread randall ehren
http://www.google.com/search?q=ipfilter+ipfw+together -- http://false.net/ipfilter/2000_02/0407.html This is what we settled with eventually, but the processing order for packets when you're using both IPF and IPFW plus ipnat is seriously f*rked. not to stray too far, but if IPFW is set

Re: incoming bandwidth limiting using ipfilter

2003-01-03 Thread Konstantin Borovik
May be /usr/ports/sysutils/ipa is the answer to your problem. Quote from port description: ipa(8) allows to make IP accounting (network accounting) based on FreeBSD IPv4/v6 Firewall (including IPFW2), OpenBSD Packet Filter and IP Filter accounting rules on FreeBSD, NetBSD and OpenBSD. It

Re: incoming bandwidth limiting using ipfilter

2003-01-03 Thread Avleen Vig
On Fri, 3 Jan 2003, randall ehren wrote: not to stray too far, but if IPFW is set to allow all incoming packets and is only used for shaping, and you have ipfilter handling nat, then it seems it would just be: network card -- IPFW (traffic shape) -- IPF (filter+nat) -- userland i guess an