Re: nested ipfw dummynet pipes

From: 'Luigi Rizzo' (rizzo_at_icir.org)
Date: 06/20/03

  • Next message: Don Bowman: "RE: nested ipfw dummynet pipes" 
    Date: Fri, 20 Jun 2003 11:43:30 -0700
To: Don Bowman <don@sandvine.com>

    On Fri, Jun 20, 2003 at 02:18:17PM -0400, Don Bowman wrote:
    ...
    > Thanks very much, I will check this. I assume this will be true
    > for IPFW2 rather than IPFW.

    one_pass actually affect both.
    the comment in parentheses refers to "layer 2 firewalling
    which is an ipfw2-only fature (bridge firewalling
    is also available with ipfw1)

    cheers
    luigi

    > It appears that 1.16.2.23, nov 21 2002, RELENG_4 has this
    > from the log:
    > "MFC: obey to fw_one_pass in bridge and layer 2 firewalling (the latter
    > only affects ipfw2 users).
    > Move fw_one_pass from ip_fw[2].c to ip_input.c to avoid depending on
    > IPFIREWALL."
    >
    > I will try this out.
    >
    > _______________________________________________
    > freebsd-net@freebsd.org mailing list
    > http://lists.freebsd.org/mailman/listinfo/freebsd-net
    > To unsubscribe, send any mail to "freebsd-net-unsubscribe@freebsd.org"
    _______________________________________________
    freebsd-net@freebsd.org mailing list
    http://lists.freebsd.org/mailman/listinfo/freebsd-net
    To unsubscribe, send any mail to "freebsd-net-unsubscribe@freebsd.org"

  • Next message: Don Bowman: "RE: nested ipfw dummynet pipes"

    Relevant Pages

    • ipfw2 and preproc
      ... I have read the man page for ipfw and searched the web looking for examples of using ipfw2 and the preprocessor option. ... To unsubscribe, ...
      (freebsd-questions)
    • Re: per-interface packet filters, design approach
      ... > updates of firewall configuration with a single syscall). ... I'm trying to consider IPFW1 in the picture as well; ... IPFW2 is something I'm considering as a separate entity. ... Are there any nicer ways of telling IPFW v1 and v2 apart both at compile ...
      (freebsd-net)
    • RE: Error compiling ipfw2 on FreeBSD 4.11-RELEASE and 4.11-p10
      ... I am pretty sure you still need to re-compile IPFW etc. ... I think ipfw2 has replaced ipfw in the base release by 4.11. ... have to do anything after compiling the kernel. ...
      (freebsd-questions)
    • Re: Profiling ipfw2 performance
      ... > Can someone please point me to a method for measuring the packet lag between interfaces when using ipfw and/or ipfw2? ... i386 kernels you can add the option ...
      (freebsd-net)
    • Re: [from newbies] RE: IPFW2 + 4.10
      ... IPFW2 is not compiled into 4.10 by default. ... At a shell, type "man ipfw", ... then a single forward slash (to bring up the search tool), ... ipfw2 is standard in FreeBSD CURRENT, ...
      (freebsd-questions)