Re: ipfw deprecation

[joerg@xxxxxxxxxxxxxxxxx]

On Tue, Jun 27, 2006 at 04:40:45PM +0300, Yury Tarasievich wrote:
> >For bandwidth, ALTQ already provides that. It should be pretty easy to
> >implement a discipline to do that for packet rates as well. Note that it
> >only applies to out-going (and indirectly for forwarded) traffic.
> 
> So, PF + ALTQ does not allow for incoming bandwidth limitation?

Incoming bandwidth limitation makes not much sense. There's no local
queue involved and the transfer did happen already. DOS protection on
the end-system is difficult...

Joerg