On 2011-11-03, Wesley M. <open...@e-solutions.re> wrote: > > I'm using OpenBSD 5.0 > I'm testing traffic shapping using altq. > I can limit a user (his Ip address) to a 160Kb/s, it works great. > But when this user try to download a file using ftp, he downloads it at > 1024Kb/s. > > I suppose it is because traffic are redirect to 127.0.0.1 (ftpproxy) > > sample of my pf.conf: > ... > anchor "ftp-proxy/*" > pass in on $lan inet proto tcp from $limithost \ > to port 21 divert-to 127.0.0.1 port 8021 queue ilimit > ... > > Is there a way to solve this problem?
for the simple case, -q as Camiel suggested. > I want also that the others can download on ftp at full speed* for this second requirement you can use -T to tag the data connections, and have separate pass rules, one for $limithost with the queue, and one for normal hosts.