🚀 go-pugleaf

RetroBBS NetNews Server

Inspired by RockSolid Light RIP Retro Guy

Article View: pl.comp.os.bsd
Article #22008

Freebsd 10.1 ipfw, dummynet on bridge

#22008
From: Bogdan Siara
Date: Wed, 18 Feb 2015 09:35
53 lines
2483 bytes
Witam,

Mam problem z kolejkowaniem za pomocą ipfw na bridge. Moje configi:

loader.conf

zfs_load="YES"
kern.geom.label.gptid.enable="0"
net.inet.ip.fw.default_to_accept="1"
dummynet_load="YES"
if_bridge_load="YES"
ipfw_load="YES"

sysctl.conf

net.inet.ip.dummynet.hash_size=4096
net.link.bridge.ipfw=1
net.link.ether.ipfw=1
net.inet.ip.fw.one_pass=1

rc.conf

hostname="freebsd"
keymap="pl_PL.ISO8859-2.kbd"
cloned_interfaces="bridge0"
ifconfig_bridge0="addm em0 addm em1 SYNCDHCP"
ifconfig_em0="up"
ifconfig_em1="up"
sshd_enable="YES"
# Set dumpdev to "AUTO" to enable crash dumps, "NO" to disable
dumpdev="AUTO"
zfs_enable="YES"
firewall_enable="YES"
firewall_type="open"

Wszystko jest ok dopóki nie odpale skryptu do ipfw, który ma nastepującą zawartość:

IPF="ipfw"
$IPF -f flush
$IPF table all -f flush
$IPF add 50 check-state
$IPF add 130 pipe 7 ip from any to 'table(5)' in
$IPF pipe 7 config bw 256Kbit/s mask dst-ip 0x000000ff
$IPF add 8000 allow all from any to any

po odpaleniu skryptu wywala kernel panic i leci restart maszyny... Nie ważne czy jest to GENERIC kerenl czy CUSTOM... Kernel mam najnowszy z svn dla 10.1, przekompilowałem GENERIC z dodatkowymi opcjami:

options         IPFIREWALL
options         IPFIREWALL_DEFAULT_TO_ACCEPT
options         DUMMYNET
options         HZ=1000

Czy ktoś mi powie co jest nie tak?
Technical Details
Message-ID: <24035f09-44a3-4615-a21f-0268b35e1e4e@googlegroups.com>
Path: mbox-mo1.pugleaf.net!news-archive.icm.edu.pl!news.icm.edu.pl!newsfeed.pionier.net.pl!news.glorb.com!hl2no18240312igb.0!news-out.google.com!n6ni8qar.0!nntp.google.com!j7no1275595qaq.1!postnews.google.com!glegroupsg2000goo.googlegroups.com!not-for-mail

Show Full Headers
Complete Article Headers
X-Received: by 10.182.39.169 with SMTP id q9mr31089745obk.33.1424252107834;        Wed, 18 Feb 2015 01:35:07 -0800 (PST)
X-Received: by 10.140.20.247 with SMTP id 110mr372043qgj.17.1424252107733; Wed, 18 Feb 2015 01:35:07 -0800 (PST)
Path: mbox-mo1.pugleaf.net!news-archive.icm.edu.pl!news.icm.edu.pl!newsfeed.pionier.net.pl!news.glorb.com!hl2no18240312igb.0!news-out.google.com!n6ni8qar.0!nntp.google.com!j7no1275595qaq.1!postnews.google.com!glegroupsg2000goo.googlegroups.com!not-for-mail
Newsgroups: pl.comp.os.bsd
Date: Wed, 18 Feb 2015 01:35:07 -0800 (PST)
Complaints-To: groups-abuse@google.com
Injection-Info: glegroupsg2000goo.googlegroups.com; posting-host=217.153.182.234; posting-account=rMv7WQkAAAA2v4gxDS5RGDvry1bg8Md9
NNTP-Posting-Host: 217.153.182.234
User-Agent: G2/1.0
MIME-Version: 1.0
Message-ID: <24035f09-44a3-4615-a21f-0268b35e1e4e@googlegroups.com>
Subject: Freebsd 10.1 ipfw, dummynet on bridge
From: Bogdan Siara <bsiara.cgi@gmail.com>
Injection-Date: Wed, 18 Feb 2015 09:35:07 +0000
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit