From owner-freebsd-pf@FreeBSD.ORG  Mon Jul 28 07:09:47 2008
Return-Path: <owner-freebsd-pf@FreeBSD.ORG>
Delivered-To: freebsd-pf@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id C4B071065673
	for <freebsd-pf@freebsd.org>; Mon, 28 Jul 2008 07:09:47 +0000 (UTC)
	(envelope-from news@topocentras.lt)
Received: from mx.agservice.lt (mx.agservice.lt [88.119.128.106])
	by mx1.freebsd.org (Postfix) with ESMTP id 7E7C88FC0C
	for <freebsd-pf@freebsd.org>; Mon, 28 Jul 2008 07:09:47 +0000 (UTC)
	(envelope-from news@topocentras.lt)
Received: from localhost (localhost [127.0.0.1])
	by mx.agservice.lt (Postfix) with ESMTP id EF59E7444A
	for <freebsd-pf@freebsd.org>; Mon, 28 Jul 2008 09:52:27 +0300 (EEST)
X-Virus-Scanned: amavisd-new at agtrade.lt
Received: from mx.agservice.lt ([127.0.0.1])
	by localhost (mail.agtrade.lt [127.0.0.1]) (amavisd-new, port 10024)
	with ESMTP id GuSR0lAPzXS6 for <freebsd-pf@freebsd.org>;
	Mon, 28 Jul 2008 09:52:25 +0300 (EEST)
Received: from mx.agservice.lt (localhost [127.0.0.1])
	(Authenticated sender: news@topocentras.lt)
	by mx.agservice.lt (Postfix) with ESMTPA id 1FF0274442
	for <freebsd-pf@freebsd.org>; Mon, 28 Jul 2008 09:52:25 +0300 (EEST)
Received: from 88.119.128.115
	(SquirrelMail authenticated user news@topocentras.lt)
	by mx.agservice.lt with HTTP; Mon, 28 Jul 2008 09:52:25 +0300 (EEST)
Message-ID: <51307.88.119.128.115.1217227945.squirrel@mx.agservice.lt>
Date: Mon, 28 Jul 2008 09:52:25 +0300 (EEST)
From: news@topocentras.lt
To: freebsd-pf@freebsd.org
User-Agent: SquirrelMail/1.4.10a
MIME-Version: 1.0
Content-Type: text/plain;charset=utf-8
Content-Transfer-Encoding: 8bit
X-Priority: 3 (Normal)
Importance: Normal
Subject: need help with keep state and shaping
X-BeenThere: freebsd-pf@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: "Technical discussion and general questions about packet filter
	\(pf\)" <freebsd-pf.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-pf>,
	<mailto:freebsd-pf-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-pf>
List-Post: <mailto:freebsd-pf@freebsd.org>
List-Help: <mailto:freebsd-pf-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-pf>,
	<mailto:freebsd-pf-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Mon, 28 Jul 2008 07:09:47 -0000

ext_if="bge0"
int_if="bge1"

pass out quick on $ext_if from 10.0.0.1 to any queue upload1
pass out quick on $int_if from any to 10.0.0.1 queue download1

pass out quick on $ext_if from 10.0.0.2 to any queue upload2
pass out quick on $int_if from any to 10.0.0.2 queue download2

pass out quick on $ext_if from 10.0.0.3 to any queue upload3
pass out quick on $int_if from any to 10.0.0.3 queue download3

pass in all
pass out all

#10.0.0.x users subnet

Hello,
I have problems with keep state usage. I need to shape ingoing and
outgoing trafic (no nat).
Before I used sintax like above, but then I used it with keyword "keep
state" some useres reported problems with trafic.
With version FreeBSD 7 with keep state on pass rules are not working at all.
Question is how to deal with keep state for in and out trafic then i need
to shape both? I tried to use set state-policy if-bound but it had no
impact.