still not work with pass in rule.
add info with this rule set:
altq on xl1 bandwidth 100% cbq queue {int_out,dflt_out}
queue int_out bandwidth 3Mb
queue dflt_out bandwidth 16Kb cbq (default)
altq on xl2 bandwidth 100% cbq queue {int_in,dflt_in}
queue int_in bandwidth 3Mb
queue dflt_in bandwidth 16Kb cbq (default)
pass out log on xl1 from 172.16.0.228 to 202.57.14.1 keep state flags
S/SA queue (int_out)
pass out log on xl2 from 202.57.14.1 to 172.16.0.228 keep state flags
S/SA queue (int_in)
if i only enabled altq on in one interface only (xl1 or xl2) , traffic
limitation that i want is can be done.
Is there something that can be done with ALTQ and PF or my rule is
bad ???
please help me...
> Try this rules:
> pass in log on xl2 from 172.16.0.228 to 202.57.14.1 keep state flags
> S/SA queue (int_out)
> pass in log on xl2 from 172.16.0.228 to 202.57.14.1 keep state flags
> S/SA queue (int_in)
>
> Gilberto
>
>
> 2006/11/6, Muhammad Reza <[EMAIL PROTECTED]>:
> > Dear All.
> >
> > I start with the simple rule set in my pf bridge machine to limit
> > bandwidth 3Mbps from my server on lan to internet and from internet to
> > my server on lan
> > this my setup:
> >
> > Internet ---xl1 xl2---LAN
> >
> > and my pf.conf
> >
> > lan="172.16.0.0/24"
> > #ALTQ at outgoing interface to limit traffic 3 MBps from lan to internet
> > altq on xl1 bandwidth 100% cbq queue {int_out,dflt_out}
> > queue int_out bandwidth 3Mb
> > queue dflt_out bandwidth 16Kb cbq (default)
> > #ALTQ at lan interface to limit traffic 3 MBps from internet to lan
> > altq on xl2 bandwidth 100% cbq queue {int_in,dflt_in}
> > queue int_in bandwidth 3Mb cbq (default)
> > queue dflt_in bandwidth 16Kb
> >
> > block on xl1
> > pass in on xl1 from any to $lan
> > pass out on xl1 from $lan to any
> > pass out log on xl1 from 172.16.0.228 to 202.57.14.1 keep state flags S/SA
> > queue (int_out)
> >
> > block on xl2
> > pass in on xl2 from $lan to any keep state
> > pass out on xl2 from any to $lan keep state
> > #pass out log on xl2 from 202.57.14.1 to 172.16.0.228 keep state flags
> > S/SA queue (int_in)
> >
> > I have done some test with iperf with no luck.
> > Is there something wrong with this rule set to acompilished my need ?
> > Please help
> >
> > Regards
> > Reza
> >
> >
> >
> > _______________________________________________
> > freebsd-pf@freebsd.org mailing list
> > http://lists.freebsd.org/mailman/listinfo/freebsd-pf
> > To unsubscribe, send any mail to "[EMAIL PROTECTED]"
> >
> _______________________________________________
> freebsd-pf@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-pf
> To unsubscribe, send any mail to "[EMAIL PROTECTED]"
>
_______________________________________________
freebsd-pf@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-pf
To unsubscribe, send any mail to "[EMAIL PROTECTED]"
