Re: Help! I'm having Linux foisted on me! (PF queuing woes)

2007-10-23 Thread Claudio Jeker
On Tue, Oct 23, 2007 at 02:10:43PM +0200, Henning Brauer wrote: > * Brian <[EMAIL PROTECTED]> [2007-10-22 20:39]: > > Joshua Smith wrote: > > > Out of curiosity what are these two extremely rare cases? > > [snip] > > > > One example off the top of my head (and ipsec.conf(5)) is the enc0 > > interf

Re: Help! I'm having Linux foisted on me! (PF queuing woes)

2007-10-23 Thread Henning Brauer
* Brian <[EMAIL PROTECTED]> [2007-10-22 20:39]: > Joshua Smith wrote: > > Out of curiosity what are these two extremely rare cases? > [snip] > > One example off the top of my head (and ipsec.conf(5)) is the enc0 > interface. You wouldn't set your state-policy to this, but each > individual rule w

Re: Help! I'm having Linux foisted on me! (PF queuing woes)

2007-10-22 Thread Brian
Joshua Smith wrote: > Out of curiosity what are these two extremely rare cases? [snip] One example off the top of my head (and ipsec.conf(5)) is the enc0 interface. You wouldn't set your state-policy to this, but each individual rule would use if-bound to prevent traffic from going out your egres

Re: Help! I'm having Linux foisted on me! (PF queuing woes)

2007-10-21 Thread Lars Hansson
On 10/19/07, Richard Wilson <[EMAIL PROTECTED]> wrote: > altq on $ext_if cbq bandwidth 9.1Mb queue { adsl_up, sdsl_up } > altq on $client_if cbq bandwidth 9.1Mb queue { adsl_dn, sdsl_dn } You probably don't want to use cbq for clients, use hfsc instead. Unless you enjoy complaints from clients who

Re: Help! I'm having Linux foisted on me! (PF queuing woes)

2007-10-20 Thread Joshua Smith
Out of curiosity what are these two extremely rare cases? Thanks, -Josh On 10/20/07, Henning Brauer <[EMAIL PROTECTED]> wrote: > * Joshua Smith <[EMAIL PROTECTED]> [2007-10-20 13:05]: > > Slightly OT, so feel free to move this to a new thread, but exactly > > what would you use ifbound states to

Re: Help! I'm having Linux foisted on me! (PF queuing woes)

2007-10-20 Thread Henning Brauer
* Joshua Smith <[EMAIL PROTECTED]> [2007-10-20 13:05]: > Slightly OT, so feel free to move this to a new thread, but exactly > what would you use ifbound states to achieve? there are two extremely rare cases I am aware of, so the general rule is: YOU DON'T. -- Henning Brauer, [EMAIL PROTECTED],

Re: Help! I'm having Linux foisted on me! (PF queuing woes)

2007-10-20 Thread Joshua Smith
Slightly OT, so feel free to move this to a new thread, but exactly what would you use ifbound states to achieve? Thanks, Josh On 10/20/07, Henning Brauer <[EMAIL PROTECTED]> wrote: > * Joe Gibbens <[EMAIL PROTECTED]> [2007-10-20 02:03]: > > As Sebastian pointed out, you will need to do some sta

Re: Help! I'm having Linux foisted on me! (PF queuing woes)

2007-10-20 Thread Henning Brauer
* Joe Gibbens <[EMAIL PROTECTED]> [2007-10-20 02:03]: > As Sebastian pointed out, you will need to do some state manipulation to > apply your traffic flows to an up and down queue. You can also do this by > setting your state-policy to be if-bound. it is 'advice' like this that makes me wanna rem

Re: Help! I'm having Linux foisted on me! (PF queuing woes)

2007-10-19 Thread Joe Gibbens
As Sebastian pointed out, you will need to do some state manipulation to apply your traffic flows to an up and down queue. You can also do this by setting your state-policy to be if-bound. On 10/19/07, Richard Wilson <[EMAIL PROTECTED]> wrote: > > n0g0013 wrote: > > On 19.10-15:15, Richard Wilson

Re: Help! I'm having Linux foisted on me! (PF queuing woes)

2007-10-19 Thread Richard Wilson
n0g0013 wrote: > On 19.10-15:15, Richard Wilson wrote: > [ ... ] >> altq on $ext_if cbq bandwidth 9.1Mb queue { adsl_up, sdsl_up } >> altq on $client_if cbq bandwidth 9.1Mb queue { adsl_dn, sdsl_dn } >> >> queue adsl_up bandwidth 256Kb cbq >> queue adsl_dn bandwidth 2Mb cbq > > is there a reason t

Re: Help! I'm having Linux foisted on me! (PF queuing woes)

2007-10-19 Thread Douglas A. Tutty
On Fri, Oct 19, 2007 at 03:15:03PM +0100, Richard Wilson wrote: > I appeal to the PF masters for some education on how to do something, > because if I can't work out how to do it using PF, I'll have to do it > with iptables. Eep! [snip the details] > That's about it really. If I can get it to wor

Re: Help! I'm having Linux foisted on me! (PF queuing woes)

2007-10-19 Thread Sebastian Benoit
Richard Wilson([EMAIL PROTECTED]) on 2007.10.19 15:15:03 +: > What I want to do: > Provide 2Mb down/256Kb up ADSL-like service, contended at 20 to one. > Provide 2Mb down/2Mb up SDSL-like service, contended at 10 to one. > By contention, I mean that to take the ADSL as the example, each client

Re: Help! I'm having Linux foisted on me! (PF queuing woes)

2007-10-19 Thread n0g0013
On 19.10-15:15, Richard Wilson wrote: [ ... ] > altq on $ext_if cbq bandwidth 9.1Mb queue { adsl_up, sdsl_up } > altq on $client_if cbq bandwidth 9.1Mb queue { adsl_dn, sdsl_dn } > > queue adsl_up bandwidth 256Kb cbq > queue adsl_dn bandwidth 2Mb cbq is there a reason that these have no child que