61
17.7 Legacy Series / Re: Traffic shaper, should I see my rules in 'ipfw -a list'?
« on: October 30, 2017, 06:49:02 pm »
Seems to populate the correct ipfw rules in a VM, with basic interfaces, time to test LAGG/VLANs...
This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.
root@fw00:~ # ipfw -a list
00100 0 0 allow pfsync from any to any
00110 0 0 allow carp from any to any
00120 0 0 allow ip from any to any layer2 mac-type 0x0806,0x8035
00130 0 0 allow ip from any to any layer2 mac-type 0x888e,0x88c7
00140 0 0 allow ip from any to any layer2 mac-type 0x8863,0x8864
00150 0 0 deny ip from any to any layer2 not mac-type 0x0800,0x86dd
00200 0 0 skipto 60000 ip6 from ::1 to any
00201 44 9156 skipto 60000 ip4 from 127.0.0.0/8 to any
00202 0 0 skipto 60000 ip6 from any to ::1
00203 0 0 skipto 60000 ip4 from any to 127.0.0.0/8
01002 36 3560 skipto 60000 udp from any to 10.8.6.254 dst-port 53 keep-state
01002 117 13994 skipto 60000 ip from any to { 255.255.255.255 or 10.8.6.254 } in
01002 160 21192 skipto 60000 ip from { 255.255.255.255 or 10.8.6.254 } to any out
01002 0 0 skipto 60000 icmp from { 255.255.255.255 or 10.8.6.254 } to any out icmptypes 0
01002 0 0 skipto 60000 icmp from any to { 255.255.255.255 or 10.8.6.254 } in icmptypes 8
01003 0 0 skipto 60000 udp from any to 192.168.3.254 dst-port 53 keep-state
01003 0 0 skipto 60000 ip from any to { 255.255.255.255 or 192.168.3.254 } in
01003 0 0 skipto 60000 ip from { 255.255.255.255 or 192.168.3.254 } to any out
01003 0 0 skipto 60000 icmp from { 255.255.255.255 or 192.168.3.254 } to any out icmptypes 0
01003 0 0 skipto 60000 icmp from any to { 255.255.255.255 or 192.168.3.254 } in icmptypes 8
65535 9056022 8639833830 allow ip from any to any
11 WAN ip 10.8.6.0/24 any DownQueue
21 WAN ip any 10.8.6.0/24 UpQueue
Does nobody seriously care, that the traffic shaper as is, cannot process ACK packets?
Side note, this specific firewall is currently unavailable, completely separate issue. Will post raw rules as soon as I get it back.