Article View: pl.comp.os.bsd
Article #22008Freebsd 10.1 ipfw, dummynet on bridge
From: Bogdan Siara
Date: Wed, 18 Feb 2015 09:35
Date: Wed, 18 Feb 2015 09:35
53 lines
2483 bytes
2483 bytes
Witam, Mam problem z kolejkowaniem za pomocą ipfw na bridge. Moje configi: loader.conf zfs_load="YES" kern.geom.label.gptid.enable="0" net.inet.ip.fw.default_to_accept="1" dummynet_load="YES" if_bridge_load="YES" ipfw_load="YES" sysctl.conf net.inet.ip.dummynet.hash_size=4096 net.link.bridge.ipfw=1 net.link.ether.ipfw=1 net.inet.ip.fw.one_pass=1 rc.conf hostname="freebsd" keymap="pl_PL.ISO8859-2.kbd" cloned_interfaces="bridge0" ifconfig_bridge0="addm em0 addm em1 SYNCDHCP" ifconfig_em0="up" ifconfig_em1="up" sshd_enable="YES" # Set dumpdev to "AUTO" to enable crash dumps, "NO" to disable dumpdev="AUTO" zfs_enable="YES" firewall_enable="YES" firewall_type="open" Wszystko jest ok dopóki nie odpale skryptu do ipfw, który ma nastepującą zawartość: IPF="ipfw" $IPF -f flush $IPF table all -f flush $IPF add 50 check-state $IPF add 130 pipe 7 ip from any to 'table(5)' in $IPF pipe 7 config bw 256Kbit/s mask dst-ip 0x000000ff $IPF add 8000 allow all from any to any po odpaleniu skryptu wywala kernel panic i leci restart maszyny... Nie ważne czy jest to GENERIC kerenl czy CUSTOM... Kernel mam najnowszy z svn dla 10.1, przekompilowałem GENERIC z dodatkowymi opcjami: options IPFIREWALL options IPFIREWALL_DEFAULT_TO_ACCEPT options DUMMYNET options HZ=1000 Czy ktoś mi powie co jest nie tak?
Technical Details
Message-ID:
<24035f09-44a3-4615-a21f-0268b35e1e4e@googlegroups.com>Path:
mbox-mo1.pugleaf.net!news-archive.icm.edu.pl!news.icm.edu.pl!newsfeed.pionier.net.pl!news.glorb.com!hl2no18240312igb.0!news-out.google.com!n6ni8qar.0!nntp.google.com!j7no1275595qaq.1!postnews.google.com!glegroupsg2000goo.googlegroups.com!not-for-mailShow Full Headers
Complete Article Headers
X-Received: by 10.182.39.169 with SMTP id q9mr31089745obk.33.1424252107834; Wed, 18 Feb 2015 01:35:07 -0800 (PST) X-Received: by 10.140.20.247 with SMTP id 110mr372043qgj.17.1424252107733; Wed, 18 Feb 2015 01:35:07 -0800 (PST) Path: mbox-mo1.pugleaf.net!news-archive.icm.edu.pl!news.icm.edu.pl!newsfeed.pionier.net.pl!news.glorb.com!hl2no18240312igb.0!news-out.google.com!n6ni8qar.0!nntp.google.com!j7no1275595qaq.1!postnews.google.com!glegroupsg2000goo.googlegroups.com!not-for-mail Newsgroups: pl.comp.os.bsd Date: Wed, 18 Feb 2015 01:35:07 -0800 (PST) Complaints-To: groups-abuse@google.com Injection-Info: glegroupsg2000goo.googlegroups.com; posting-host=217.153.182.234; posting-account=rMv7WQkAAAA2v4gxDS5RGDvry1bg8Md9 NNTP-Posting-Host: 217.153.182.234 User-Agent: G2/1.0 MIME-Version: 1.0 Message-ID: <24035f09-44a3-4615-a21f-0268b35e1e4e@googlegroups.com> Subject: Freebsd 10.1 ipfw, dummynet on bridge From: Bogdan Siara <bsiara.cgi@gmail.com> Injection-Date: Wed, 18 Feb 2015 09:35:07 +0000 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit