On 2007/09/07 08:41, David Newman wrote: > > 1. I believe "keep state" is still needed when using queuing. The > pf.conf manpage says it must be specified explicitly to apply options to > a rule.
Only for state-related options (max-src-conn-rate and so); queue is separate (and may also be used where you don't keep state). > 2. The "queue (class1, class2)" syntax assumes class1 TOS == 0 and > class2 TOS != 0. look for pqid in sys/net/pf.c or just look at QUEUEING in pf.conf(5): Packets can be assigned to queues based on filter rules by using the queue keyword. Normally only one queue is specified; when a second one is specified it will instead be used for packets which have a TOS of lowdelay and for TCP ACKs with no data payload.