On 2007/09/07 08:41, David Newman wrote:
> 
> 1. I believe "keep state" is still needed when using queuing. The
> pf.conf manpage says it must be specified explicitly to apply options to
> a rule.

Only for state-related options (max-src-conn-rate and so);
queue is separate (and may also be used where you don't keep state).

> 2. The "queue (class1, class2)" syntax assumes class1 TOS == 0 and
> class2 TOS != 0.

look for pqid in sys/net/pf.c or just look at QUEUEING in pf.conf(5):

     Packets can be assigned to queues based on filter rules by using the
     queue keyword.  Normally only one queue is specified; when a second one
     is specified it will instead be used for packets which have a TOS of
     lowdelay and for TCP ACKs with no data payload.

Reply via email to