Thanks for your reply.
I'm really about at my wits end with this. I think I'm going add a
generic wireless router to my switch and have everyone access through
that. Is it possible that there's something wrong with the ral driver?
I've heard though that this is a very reliable driver under openbsd.
I'm noticing that when I do a 'top' my interrupt usage stays at aroudn
30%. Again - I have to think that this is a hardware limitation on the
soekris.
Here is my pf.conf
ext_if="sis0"
dmz_if="sis1"
int_if="sis2"
wii_if="ral0"
wired_lan= "192.168.4.0/24"
wireless_lan="192.168.5.0/24"
VOIP_PORTS = "{4520, 4569, 5060, 5061, 5062, 10000:60000}"
VOIP_SERVERS = "{IP OF VOIP SERVER}"
ADMIN_PORTS = "{80,22,2812, 4445}"
ADMIN_HOSTS = "{A BUNCH OF IPS}"
VOIP_GATEWAYS = "{74.52.15.138}"
OUTGOING_PORTS = "{80, 53}"
set block-policy return
#scrub in all
#scrub out all
altq on $ext_if priq bandwidth 500Kb queue {std_out, voip_out}
queue std_out priq(default)
queue voip_out priority 10
altq on $wii_if priq bandwidth 40Mb queue {wii_std, wii_voip}
queue wii_std priq(default)
queue wii_voip priority 10
set skip on {lo0 sis1 ral0 sis2 }
###NAT####
nat on $ext_if from $wired_lan to any -> ($ext_if)
nat on $ext_if from $wireless_lan to any -> ($ext_if)
block log all
pass quick on $ext_if proto tcp from $ADMIN_HOSTS to any port 22 keep state
pass quick on $ext_if proto {tcp udp} from $ADMIN_HOSTS to any port
$ADMIN_PORTS keep state
pass quick on $ext_if proto {tcp udp} from $ADMIN_HOSTS to any port
$VOIP_PORTS keep state
pass quick on $ext_if proto {icmp} from $ADMIN_HOSTS to any
pass in quick on $wii_if from $wireless_lan to $VOIP_SERVERS keep state
pass in quick on $int_if from $VOIP_SERVERS to $wireless_lan keep state
pass in quick on $ext_if from $VOIP_GATEWAYS to $VOIP_SERVERS
pass quick on $int_if from any to any
pass out quick on $ext_if from any to any keep state
pass out quick from $VOIP_SERVERS to any keep state
pass out quick on {$ext_if} from $VOIP_SERVERS to any keep state
#########################################
Here is my netstat -m out:
9720 mbufs in use:
9670 mbufs allocated to data
47 mbufs allocated to packet headers
3 mbufs allocated to socket names and addresses
9661/9674/30000 mbuf clusters in use (current/peak/max)
21784 Kbytes allocated to network (-92% in use)
0 requests for memory denied
0 requests for memory delayed
0 calls to protocol drain routines
