+ Responder ao Tópico



  1. #1
    mult
    Visitante

    Padrão ipfw + dummynet x squid (limite de banda)

    ola povo =D
    estou com problemas no limite de banda + squid
    qdo eu boto no ipfw o fwd pra porta 80 o limite de banda não funciona
    minhas regras abaixo

    00004 divert 8668 ip from any to any via xl0
    00005 allow ip from any to any via l0
    00006 deny ip from any to 127.0.0.0/8
    00007 deny ip from 127.0.0.0/8 to any
    00010 allow ip from me to any
    00011 allow ip from any to me
    00020 deny ip from 172.10.0.0/16 to 172.10.0.0/16
    00500 fwd 172.10.0.1,3128 tcp from 172.10.10.0/24 to any dst-port 80
    01126 pipe 126 ip from any to 172.10.10.63 in
    01127 pipe 127 ip from 172.10.10.63 to any out
    33126 allow ip from any to 172.10.10.63
    33127 allow ip from 172.10.10.63 to any
    65535 deny ip from any to any

    qdo eu apago a regra 00500 limita a banda tranquilo
    alguem pode me ajudar please?

  2. #2
    etherlink
    Visitante

    Padrão ipfw+dummynet+squid

    Use o pf para fazer o proxy transparent com a seguinte linha
    rdr on $int_if proto tcp from any to any port 80 -> 127.0.0.1 port 3128 # Transparent Proxy
    e controle de banda add queue 1 ip from 192.168.1.0/24 to any out
    add queue 2 ip from any to 192.168.1.0/24 in

    queue 1 config weight 5 pipe 2 mask src-ip 0x000000ff
    queue 2 config weight 5 pipe 3 mask dst-ip 0x000000ff
    pipe 2 config bw 512Kbit/s queue 10
    pipe 3 config bw 512Kbit/s queue 10
    # controle de banda cliente 1
    ipfw -q pipe 30009 config bw 512Kbit/s queue 8Kbytes # IN
    ipfw -q pipe 30010 config bw 512Kbit/s queue 8Kbytes # OUT
    ipfw -q add pipe 30009 all from IP_CLIENTE to any in via IF_Y
    ipfw -q add pipe 30010 all from any to IP_CLIENTE out via IF_Y

  3. #3
    mult
    Visitante

    Padrão ipfw + dummynet x squid (limite de banda)

    vlw etherlink consegui resolver
    apenas invertendo as regras
    de
    01126 pipe 126 ip from any to 172.10.10.63 in
    01127 pipe 127 ip from 172.10.10.63 to any out

    para
    01126 pipe 126 ip from 172.10.10.63 to any in
    01127 pipe 127 ip from any to 172.10.10.63 out