packet order, ipf or ipfw

From: Charlie Schluting (charlie_at_schluting.com)
Date: 07/28/04

  • Next message: Max Laier: "Re: packet order, ipf or ipfw" 
    Date: Wed, 28 Jul 2004 14:23:33 -0700
To: freebsd-net@freebsd.org

    Hello..

    I'm running ipf because I like it ...but now I need to use ipfw's pipe
    feature. I was thinking that I could just run both, and keep all my
    rules in ipf, then in ipfw: limit bandwidth for a few vlans, then allow all.

    It didn't work (no rate-limiting happened).. and I'm thinking that ipf
    is passing the packets and bypassing ipfw? Or something..

    So, what is the order, if I'm running ipf AND ipfw at the same time?
    Will it work at all in this manner?

    Thanks!
    -Charlie
    _______________________________________________
    freebsd-net@freebsd.org mailing list
    http://lists.freebsd.org/mailman/listinfo/freebsd-net
    To unsubscribe, send any mail to "freebsd-net-unsubscribe@freebsd.org"

  • Next message: Max Laier: "Re: packet order, ipf or ipfw"

    Relevant Pages

    • Re: packet order, ipf or ipfw
      ... > rules in ipf, then in ipfw: limit bandwidth for a few vlans, then allow ... > So, what is the order, if I'm running ipf AND ipfw at the same time? ... that ipfw will see translated packets! ...
      (freebsd-net)
    • Re: packet order, ipf or ipfw
      ... CS> So, what is the order, if I'm running ipf AND ipfw at the same time? ... Load both firewalls as modules, then you can be sure packets goes ... first through firewall you load first. ...
      (freebsd-net)
    • Re: packet order, ipf or ipfw
      ... We found IPFW a little complex to use, ... >> I'm running ipf because I like it ...but now I need to use ipfw's pipe ... >> So, what is the order, if I'm running ipf AND ipfw at the same time? ... > AFAIK, ipf takes precedence on ipfw for incoming packets on -STABLE, ...
      (freebsd-net)
    • Re: parallelizing ipfw table
      ... Given that hash tables are already implemented in both ipfw and dummynet ... I have implemented a feature that allows to merge your ruleset ... The rule itself points into a pipe, ...
      (freebsd-net)