🚀 go-pugleaf

RetroBBS NetNews Server

Inspired by RockSolid Light RIP Retro Guy

Article View: pl.comp.os.bsd
Article #22161

Freebsd 10.1 ipfw, dummynet on bridge

#22161
From: Bogdan Siara
Date: Wed, 18 Feb 2015 01:35
56 lines
1414 bytes
Witam,

Mam problem z kolejkowaniem za pomoc± ipfw na bridge. Moje configi:

loader.conf

zfs_load="YES"
kern.geom.label.gptid.enable="0"
net.inet.ip.fw.default_to_accept="1"
dummynet_load="YES"
if_bridge_load="YES"
ipfw_load="YES"

sysctl.conf

net.inet.ip.dummynet.hash_size=4096
net.link.bridge.ipfw=1
net.link.ether.ipfw=1
net.inet.ip.fw.one_pass=1

rc.conf

hostname="freebsd"
keymap="pl_PL.ISO8859-2.kbd"
cloned_interfaces="bridge0"
ifconfig_bridge0="addm em0 addm em1 SYNCDHCP"
ifconfig_em0="up"
ifconfig_em1="up"
sshd_enable="YES"
# Set dumpdev to "AUTO" to enable crash dumps, "NO" to disable
dumpdev="AUTO"
zfs_enable="YES"
firewall_enable="YES"
firewall_type="open"

Wszystko jest ok dopóki nie odpale skryptu do ipfw, który ma nastepuj±c± zawarto¶æ:

IPF="ipfw"
$IPF -f flush
$IPF table all -f flush
$IPF add 50 check-state
$IPF add 130 pipe 7 ip from any to 'table(5)' in
$IPF pipe 7 config bw 256Kbit/s mask dst-ip 0x000000ff
$IPF add 8000 allow all from any to any

po odpaleniu skryptu wywala kernel panic i leci restart maszyny... Nie wa¿ne czy jest to GENERIC kerenl czy CUSTOM... Kernel mam najnowszy z svn dla 10.1, przekompilowa³em GENERIC z dodatkowymi opcjami:

options         IPFIREWALL
options         IPFIREWALL_DEFAULT_TO_ACCEPT
options         DUMMYNET
options         HZ=1000

Czy kto¶ mi powie co jest nie tak?

Message-ID: <24035f09-44a3-4615-a21f-0268b35e1e4e@googlegroups.com>
Path: polish.pugleaf.net!archive.newsdeef.eu!mbox2nntp-pl.comp.os.bsd.20150320.mbox.gz!border1.nntp.dca1.giganews.com!nntp.giganews.com!news.glorb.com!hl2no18240312igb.0!news-out.google.com!n6ni8qar.0!nntp.google.com!j7no1275595qaq.1!postnews.google.com!glegroupsg2000goo.googlegroups.com!not-for-mail