>> I have a problem with altq on OpenBSD 4.4 firewall, but I can not be >> properly understood how altq works. ... >> I have attached my pf.conf
this is way too complicated for you to get a good understanding of how altq works. please start with something simpler. > Is this rule perhaps catching your traffic? > > pass out quick on egress inet proto tcp from $ext_if to ! ><Internal_Networks> port { http smtp ssh } flags S/SA $ms tag fw_to_inet > > If so, you should queue this, too. also note you can queue the _inbound_ packets, which will associate a queue with the state table entry, then the queue of this name will be used when those packets are sent _out_. > You could monitor the traffic with pftop for a traffic match/rule analysis. many of the views from pftop are also available in systat (in the base OS) these days. see "systat queues", "systat rules", "systat pf" etc.