On 2011-11-03, Wesley M. <open...@e-solutions.re> wrote:
>
> I'm using OpenBSD 5.0 
> I'm testing traffic shapping using altq. 
> I can limit a user (his Ip address) to a 160Kb/s, it works great.
> But when this user try to download a file using ftp, he downloads it at
> 1024Kb/s. 
>
> I suppose it is because traffic are redirect to 127.0.0.1 (ftpproxy)
>
> sample of my pf.conf:
> ...
> anchor "ftp-proxy/*"
> pass in on $lan inet proto tcp from $limithost \
>         to port 21 divert-to 127.0.0.1 port 8021 queue ilimit
> ...
>
> Is there a way to solve this problem?

for the simple case, -q as Camiel suggested.

> I want also that the others can download on ftp at full speed*

for this second requirement you can use -T to tag the data connections,
and have separate pass rules, one for $limithost with the queue, and
one for normal hosts.

Reply via email to