#!/bin/sh
# dummynet3 test setup: load ipfw3 (default-accept) + dummynet3, add divert rules.
# Safe against lockout: net.filters_default_to_accept=1 BEFORE kldload ipfw3,
# so the default rule is accept.
set -x
sysctl net.filters_default_to_accept=1
kldload ipfw3 2>/dev/null || true
kldload dummynet3 2>/dev/null || true
kldstat | grep -E 'ipfw3|dummynet'
ipfw3 add 100 queue 100 udp from any to any dst-port 1000 via lo0
ipfw3 add 101 queue 101 udp from any to any dst-port 1001 via lo0
ipfw3 add 200 queue 200 udp from any to any dst-port 2001 via lo0
ipfw3 add 201 queue 200 udp from any to any dst-port 2002 via lo0
ipfw3 add 300 queue 300 udp from any to any dst-port 3001 via lo0
ipfw3 add 301 queue 300 udp from any to any dst-port 3002 via lo0
ipfw3 add 400 queue 400 udp from any to any dst-port 4001 via lo0
ipfw3 add 500 queue 500 udp from any to any dst-port 5000 via lo0
ipfw3 list