Hi,

Thanks for your insights.

> ----- Original Message -----
> From: scott <[EMAIL PROTECTED]>


> 1. Your topology:  On the "inside" lan, are you hosting clients or
> service?  So is this an outside-to-inside -or- an inside-to-outside
> problem?

VoIP Clients. ATAs. This is an inside-to-outside problem.

>
> 2. altq queue-type priq effectively does what your asking -- if voip
> traffic is allocated to priority 6, then nothing flows from queues 5, 4,
> 3, 2, and 1 while the q6 "bucket is wet."

My bandwidth is very very limited. Not more than 140 Kbps on both
sides at any time. I use G729 as a codec in order to reduce
consumption. Use the pf.conf below, when VoIP is the only traffic,
the quality of the calls is excelent with no voice cutting at all.
Now if I start a download I immediatelly see the quality degrade.

That is why I thought of using some radical policy.

I would appreciate any comments on this ruleset.

ext_if="fxp0"
int_if="vr0"
lan_net=$int_if:network

voipservers = "{ 200.184.77.145, 200.184.77.138 } "
atas = "{ 192.168.2.33 }"

low_pri="{ ftp-data, ftp, www, https }"

set skip on lo
set loginterface $ext_if

altq on $ext_if priq bandwidth 125Kb queue {std_out, voip_out, \
 lowdelay, lowpri_out}
queue lowpri_out priority 1
queue std_out priority 4 priq(default)
queue voip_out priority 11
queue lowdelay priority 12


altq on $int_if priq bandwidth 125Kb queue {std_in, voip_in, lowpri_in}
queue lowpri_in priority 1
queue std_in priority 4 priq (default)
queue voip_in priority 6

nat on $ext_if from !($ext_if) -> ($ext_if:0)

block in log
pass out queue (std_out,lowdelay)

pass out on $ext_if inet proto {tcp udp} from ($ext_if) to any \
 port $low_pri queue lowpri_out

pass in on $int_if from $int_if:network
pass in on $int_if from $atas to any queue voip_in
pass out on $int_if from any to $int_if:network
pass out on $int_if proto {udp,tcp} from any \
 port $low_pri to $int_if:network queue lowpri_in

antispoof quick for { lo $int_if }

pass in on $ext_if proto tcp to ($ext_if) port 2220 queue (std_out, lowdelay)

pass out on $ext_if inet proto udp from any to $voipservers queue voip_out
keep

Regards,

Jeff.



--
Want an e-mail address like mine?
Get a free e-mail account today at www.mail.com!

Reply via email to