Re: packet order, ipf or ipfw

From: Charlie Schluting (charlie_at_schluting.com)
Date: 07/30/04

  • Next message: Mitch (bitblock): "RE: ipsec packet filtering" 
    Date: Fri, 30 Jul 2004 10:33:46 -0700
To: freebsd-net@freebsd.org

    Dinesh Nair wrote:
    > by default the flow is:
    >
    > wire -> ipnat -> ipfilter -> ipfw -> kernel -> ipfilter -> ipnat ->ipfw
    >
    > the patch in the above PR changes it to:
    >
    > wire -> ipnat -> ipfilter -> ipfw -> kernel -> ipfw -> ipfilter -> ipnat

    Interesting! Thanks for all the great info guys.

    I don't really need to use the patch, since I simply want to limit my
    outbound bandwidth usage.

    The problem with my rules before was a result of not understanding that
    nat translation had already taken place (I think). I'll test this weekend.

    Thanks;
    -Charlie
    _______________________________________________
    freebsd-net@freebsd.org mailing list
    http://lists.freebsd.org/mailman/listinfo/freebsd-net
    To unsubscribe, send any mail to "freebsd-net-unsubscribe@freebsd.org"

  • Next message: Mitch (bitblock): "RE: ipsec packet filtering"

    Relevant Pages