From owner-freebsd-pf@FreeBSD.ORG  Tue Nov  7 19:41:44 2006
Return-Path: <owner-freebsd-pf@FreeBSD.ORG>
X-Original-To: freebsd-pf@freebsd.org
Delivered-To: freebsd-pf@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 36CD616A407
	for <freebsd-pf@freebsd.org>; Tue,  7 Nov 2006 19:41:44 +0000 (UTC)
	(envelope-from linux@giboia.org)
Received: from ug-out-1314.google.com (ug-out-1314.google.com [66.249.92.169])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 2EA3443D8F
	for <freebsd-pf@freebsd.org>; Tue,  7 Nov 2006 19:41:31 +0000 (GMT)
	(envelope-from linux@giboia.org)
Received: by ug-out-1314.google.com with SMTP id o2so1122488uge
	for <freebsd-pf@freebsd.org>; Tue, 07 Nov 2006 11:41:31 -0800 (PST)
Received: by 10.78.97.7 with SMTP id u7mr8683718hub.1162928491461;
	Tue, 07 Nov 2006 11:41:31 -0800 (PST)
Received: by 10.78.175.17 with HTTP; Tue, 7 Nov 2006 11:41:31 -0800 (PST)
Message-ID: <6e6841490611071141u2f1ad06apaa4542a94f8b786b@mail.gmail.com>
Date: Tue, 7 Nov 2006 17:41:31 -0200
From: "Gilberto Villani Brito" <linux@giboia.org>
To: "FreeBSD (PF)" <freebsd-pf@freebsd.org>
In-Reply-To: <6e6841490611071140u486d550bn8d3f3f0c40b6fd9@mail.gmail.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
References: <1162836051.23997.7.camel@beastie.mra.co.id>
	<6e6841490611071140u486d550bn8d3f3f0c40b6fd9@mail.gmail.com>
Subject: Re: pf.conf + altq problem
X-BeenThere: freebsd-pf@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: "Technical discussion and general questions about packet filter
	\(pf\)" <freebsd-pf.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-pf>,
	<mailto:freebsd-pf-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-pf>
List-Post: <mailto:freebsd-pf@freebsd.org>
List-Help: <mailto:freebsd-pf-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-pf>,
	<mailto:freebsd-pf-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 07 Nov 2006 19:41:44 -0000

Try this rules:
pass in log on xl2 from 172.16.0.228 to 202.57.14.1 keep  state flags
S/SA queue (int_out)
pass in log on xl2 from 172.16.0.228 to 202.57.14.1 keep  state flags
S/SA queue (int_in)

Gilberto


2006/11/6, Muhammad Reza <beastie@mra.co.id>:
> Dear All.
>
> I start with the simple rule set in my pf bridge machine to limit
> bandwidth 3Mbps  from my server on lan to internet and from internet to
> my server on lan
> this my setup:
>
> Internet ---xl1 xl2---LAN
>
> and my pf.conf
>
> lan="172.16.0.0/24"
> #ALTQ at outgoing interface to limit traffic 3 MBps from lan to internet
> altq on xl1 bandwidth 100% cbq queue {int_out,dflt_out}
> queue int_out       bandwidth 3Mb
> queue dflt_out      bandwidth  16Kb cbq (default)
> #ALTQ at lan interface to limit traffic 3 MBps from internet to lan
> altq on xl2 bandwidth 100% cbq queue {int_in,dflt_in}
> queue int_in       bandwidth 3Mb   cbq (default)
> queue dflt_in      bandwidth  16Kb
>
> block on xl1
> pass in on xl1  from any to $lan
> pass out on xl1 from $lan to any
> pass out log on xl1 from 172.16.0.228 to 202.57.14.1 keep  state flags S/SA queue (int_out)
>
> block on xl2
> pass in on xl2 from $lan to any keep state
> pass out on xl2  from any to $lan  keep state
> #pass  out  log on xl2 from 202.57.14.1 to 172.16.0.228 keep state flags S/SA queue (int_in)
>
> I have done some test with iperf with no luck.
> Is there something wrong with this rule set to acompilished my need ?
> Please help
>
> Regards
> Reza
>
>
>
> _______________________________________________
> freebsd-pf@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-pf
> To unsubscribe, send any mail to "freebsd-pf-unsubscribe@freebsd.org"
>