Date: Thu, 12 Oct 2006 04:16:15 -0000 From: Muhammad Reza <beastie@mra.co.id> To: freebsd-questions@freebsd.org, freebsd-net@freebsd.org Subject: pf.conf + altq problem Message-ID: <1009992059.6727.20.camel@beastie.mra.co.id>
next in thread | raw e-mail | index | archive | help
Dear list.
My pf.conf not working.
I have pf in bridge machine with xl2 to internet firewall and xl1 to
internal switch. Bridging is ok.
This my simple pf.conf
me="172.16.0.228"
altq on xl1 bandwidth 100% cbq queue {me,dflt}
queue me bandwidth 8Kb
queue dflt bandwidth 16Kb cbq (default)
block log on {xl1,xl2} all
pass out log on xl1 from $me to any keep state
pass log on xl2 from $me to any keep state queue (me)
This rule is match when i try to connect to iperf server
# tcpdump -nett -i pflog0 | grep 172.16.0.228
tcpdump: WARNING: pflog0: no IPv4 address assigned
tcpdump: listening on pflog0, link-type PFLOG
1160655756.150048 rule 3/(match) pass in on xl2: 172.16.0.228.44405 >
128.6.231.102.5001: [|tcp] (DF)
1160655756.150059 rule 2/(match) pass out on xl1: 172.16.0.228.44405 >
128.6.231.102.5001: [|tcp] (DF)
But iperf tell me that this connection is 24.4 Kbits/Sec. (more than
8Kbps)
[root@beastie beastie]# iperf -c lss.rutgers.edu
------------------------------------------------------------
Client connecting to lss.rutgers.edu, TCP port 5001
TCP window size: 16.0 KByte (default)
------------------------------------------------------------
[ 3] local 172.16.0.228 port 44408 connected with 128.6.231.102 port
5001
[ 3] 0.0-16.1 sec 48.0 KBytes 24.4 Kbits/sec
I'm expecting that iperf report it equal with the bandwidth that i
assign to (me) queue pipe.
Is there any thing wrong or i missed something here ???
Please help me
regards
Reza
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?1009992059.6727.20.camel>