Hello ALbertas, I thought 'keep state' is a default behavior in FreeBSD 7 and you don't have to specify that keyword?
Regards, Ivan On Wed, Jul 30, 2008 at 9:43 AM, <[EMAIL PROTECTED]> wrote: > Hello once more, > It whould be very interesting to hear from you how to use keep state for > router, shaping in and out traffic. > I am using around thousand of queues(hfsc) and it makes a lot of > performace problems. Using keep state it would reduce it, but as i mention > before, i have problems using it. > > Sincerely Yours, > Albertas > >> ext_if="bge0" >> int_if="bge1" >> >> pass out quick on $ext_if from 10.0.0.1 to any queue upload1 >> pass out quick on $int_if from any to 10.0.0.1 queue download1 >> >> pass out quick on $ext_if from 10.0.0.2 to any queue upload2 >> pass out quick on $int_if from any to 10.0.0.2 queue download2 >> >> pass out quick on $ext_if from 10.0.0.3 to any queue upload3 >> pass out quick on $int_if from any to 10.0.0.3 queue download3 >> >> pass in all >> pass out all >> >> #10.0.0.x users subnet >> >> Hello, >> I have problems with keep state usage. I need to shape ingoing and >> outgoing trafic (no nat). >> Before I used sintax like above, but then I used it with keyword "keep >> state" some useres reported problems with trafic. >> With version FreeBSD 7 with keep state on pass rules are not working at >> all. >> Question is how to deal with keep state for in and out trafic then i need >> to shape both? I tried to use set state-policy if-bound but it had no >> impact. >> >> _______________________________________________ >> [email protected] mailing list >> http://lists.freebsd.org/mailman/listinfo/freebsd-pf >> To unsubscribe, send any mail to "[EMAIL PROTECTED]" >> > > > _______________________________________________ > [email protected] mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-pf > To unsubscribe, send any mail to "[EMAIL PROTECTED]" > _______________________________________________ [email protected] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-pf To unsubscribe, send any mail to "[EMAIL PROTECTED]"
