[FUGSPBR] configuracao do ipfirewall

[Moises Duque]

Cenario  :
gateway : FreeBsd 4.2 com duas placas de rede

ed0 : ip valido x.x.x.x
ed1 : 10.0.0.49:255.255.255.0

firewall: fechado por padrao

/sbin/ipfw -q -f flush
                -q add 00100 check-state
                 -q add 00200 divert natd all from any to any via ed0
                 -q add 00300 allow ip from any to any via lo0
                  -q add 00400 allow ip from any to any via ed1
                  -q add 00500 allow tcp from x.x.x.x to any out xmit ed0
setup
                   -q add 00600 allow tcp from any to any via ed0
established
                    -q add 00650 allow icmp frfom any to any in icmptyes 0
                    -q add 00700 allow icmp from x.x.x.x to any out
icmptypes 8
                     -q add 00800 allow udp from x.x.x.x to any keep-state

duvidas:
1)nao consiguo pingar das estacoes
2) onde colocar regras(abaixo) para divisao de banda? Este ip eo valido ou o
da rede interna?dica dada pelo Gamk

ipfw add queue 1 ip from any to 192.168.0.0/24 in
ipfw add queue 1 ip from 192.168.0.0/24 to any out
ipfw queue 1 config weight 10 pipe 1 mask dst-ip 0x000000ff
ipfw pipe 1 config bw 64Kbit/s
ipfw queue 2 config weight 10 pipe 2 mask src-ip 0x000000ff
ipfw pipe 2 config bw 64Kbit/s

Desta maneira vc estaria usando um algoritimo chamado WF2Q+ (Worst-case Fair
Weighted Fair Queueing), usando pesos iguais para todos os usuários.


_______________________________________________________________
Sair da Lista: http://www2.fugspbr.org/mailman/listinfo/fugspbr
Historico: http://www4.fugspbr.org/lista/html/FUG-BR/