作者ilay (resolution)
看板FreeBSD
标题[请益] ipfw在频宽管理的部份
时间Fri Jan 26 16:00:59 2007
想请教一下关於 ipfw 的频宽管理部份:
目前使用一台主机当NAT,firewall,DHCP server
该主机安装两片网卡:rl0,rl1 (都是 RTL8139)
rl1是对外(连接ATU-R),rl0 是对内 连接各Hub 提供内部共数十台PC上网
以下是 rc.firewall 设定档
================================================================
myip="1.2.3.4"
outif="rl1"
inif="rl0"
/sbin/ipfw -f flush
# Throw away RFC 1918 networks
${ipfw} add deny ip from 10.0.0.0/8 to any in via ${oif}
${ipfw} add deny ip from 172.16.0.0/12 to any in via ${oif}
${ipfw} add deny ip from 192.168.0.0/16 to any in via ${oif}
/sbin/ipfw add 400 deny icmp from any to any
/sbin/ipfw add divert natd all from any to any via rl1
/sbin/ipfw pipe 20 config bw 24KBytes/s
/sbin/ipfw pipe 21 config bw 256KBytes/s
/sbin/ipfw add pipe 20 ip from 192.168.0.0/16 to any
/sbin/ipfw add pipe 21 ip from any to 192.168.0.0/16
/sbin/ipfw add check-state
/sbin/ipfw add 2000 allow udp from ${myip} to any keep-state
/sbin/ipfw add 2100 pass ip from ${myip} to any
/sbin/ipfw add 3000 pass tcp from any to ${myip} 22 in via ${outif}
/sbin/ipfw add 1200 add deny ip from ${myip}/24 to any in via ${oif}
/sbin/ipfw 65535 add deny all from any to any
======================================================
目前想改善的是
在使用 Internet 的 PC 数不多时
能够让每台 PC 分配到更多的频宽
这样子应该要怎麽改写 还是得用 pf?
谢谢了 :)
--
IE7
http://ie7.com
--
※ 发信站: 批踢踢实业坊(ptt.cc)
◆ From: 220.142.196.251