On 2011/01/11 12:46, Bonnie Packet wrote: > the question is how to manage it simultaneously with the > download direction when those packets already part of an established, > stateful TCP connection that bypasses the firewall rules.
the PF state is associated with queue by name - you can use the same queue name on more than one interface. in many situations doing this gives you just enough control that you can limit traffic in both directions on a single machine.
