From owner-freebsd-pf@FreeBSD.ORG  Sun Oct 28 19:36:25 2007
Return-Path: <owner-freebsd-pf@FreeBSD.ORG>
Delivered-To: freebsd-pf@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id 05E7D16A41A
	for <freebsd-pf@freebsd.org>; Sun, 28 Oct 2007 19:36:25 +0000 (UTC)
	(envelope-from amb@amb.kiev.ua)
Received: from simmts3-srv.bellnexxia.net (simmts3-srv.bellnexxia.net
	[206.47.199.12])
	by mx1.freebsd.org (Postfix) with ESMTP id 8A7DA13C4B3
	for <freebsd-pf@freebsd.org>; Sun, 28 Oct 2007 19:36:24 +0000 (UTC)
	(envelope-from amb@amb.kiev.ua)
Received: from amb.homeunix.org ([156.34.188.4]) by simmts7-srv.bellnexxia.net
	(InterMail vM.5.01.06.13 201-253-122-130-113-20050324) with ESMTP id
	<20071028193456.SYJP28304.simmts7-srv.bellnexxia.net@amb.homeunix.org>;
	Sun, 28 Oct 2007 15:34:56 -0400
Received: from server.amb.kiev.ua ([10.15.25.2] helo=amb.kiev.ua)
	by amb.homeunix.org with esmtp (Exim 4.68 (FreeBSD))
	(envelope-from <amb@amb.kiev.ua>)
	id 1ImDuS-0002BC-Fa; Sun, 28 Oct 2007 16:34:56 -0300
Message-ID: <4724E460.1050309@amb.kiev.ua>
Date: Sun, 28 Oct 2007 16:34:56 -0300
From: Andrew Birukov <amb@amb.kiev.ua>
User-Agent: Thunderbird 2.0.0.6 (X11/20070803)
MIME-Version: 1.0
To: =?UTF-8?B?RXJtYWwgTHXDp2k=?= <ermal.luci@gmail.com>
References: <4724D6EE.6050004@amb.kiev.ua>
	<9a542da30710281214v79cd332fx69b8806db2895836@mail.gmail.com>
In-Reply-To: <9a542da30710281214v79cd332fx69b8806db2895836@mail.gmail.com>
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 8bit
X-SA-Exim-Connect-IP: 10.15.25.2
X-SA-Exim-Rcpt-To: ermal.luci@gmail.com, freebsd-stable@freebsd.org,
	freebsd-pf@freebsd.org
X-SA-Exim-Mail-From: amb@amb.kiev.ua
X-SA-Exim-Scanned: No (on amb.homeunix.org); SAEximRunCond expanded to false
Cc: freebsd-stable@freebsd.org, freebsd-pf@freebsd.org
Subject: Re: pf broken in 7.0-BETA1 ?
X-BeenThere: freebsd-pf@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: "Technical discussion and general questions about packet filter
	\(pf\)" <freebsd-pf.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-pf>,
	<mailto:freebsd-pf-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-pf>
List-Post: <mailto:freebsd-pf@freebsd.org>
List-Help: <mailto:freebsd-pf-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-pf>,
	<mailto:freebsd-pf-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Sun, 28 Oct 2007 19:36:25 -0000

Ermal Luçi wrote:
> Try using
> 
> pass out on $ext_if proto tcp from any to any tos 0x10 no keep state queue ssh
> 
> and it should work as you expect!

pf.conf
-------------------------------------------------------------------
ext_if="xl0"

altq on $ext_if priq bandwidth 520Kb queue { ssh, traf }
queue ssh priority 1
queue traf  priority 15 priq(default)

pass in all
pass out all

pass out on $ext_if proto tcp from any to any tos 0x10 no keep state 
queue ssh
-------------------------------------------------------------------

# /etc/rc.d/pf restart
Disabling pf.
pf disabled
Enabling pf.
/etc/pf.conf:10: syntax error
pfctl: Syntax error in config file: pf rules not loaded
pf enabled

Unfortunately syntax error...


-- 
Andrew Biriukov
amb@amb.kiev.ua