Understanding where dummynet fits into an ipfw ruleset

Freddie Cash fjwcash at gmail.com
Sun Jun 29 05:36:12 UTC 2008


On Fri, Jun 27, 2008 at 4:34 PM, Martes Wigglesworth
<martes at mgwigglesworth.com> wrote:
> It really does not matter, because the que has nothing to do with denial
> of service unless you set it up that way.  You just divert to the
> dummynet pipe, or que and then the rest is handled by the mechanism.
> The ipfw rule only works to augment the flow of traffic into the pipe,
> or que.  Just make sure you are not dropping any of the intended traffic
> prior to a dummynet rule, because then you would be hendering the rule's
> ability to shoot traffic to the que, or pipe.
>
> The dummynet manpage has some examples, and there are some good
> tutorials on onlamp.com.
>
> Otherwise, I hate to say it but, "google it."

Yes, I've read the dummynet and ipfw man pages.  Yes, I've read
articles on the 'Net.  Yes, I've done google searches.  And no, it
still doesn't make sense how queue rules work with packet filter
rules.  Hence, why I'm asking here.

> I have not done much with bandwidth shaping in about a year, so I am a
> bit rusty as to the more complex setups however, it is one of the more
> easy to remember methods so I think that I am correct, or at least not
> far off of base.

-- 
Freddie Cash
fjwcash at gmail.com


More information about the freebsd-net mailing list