Re: pf queueing and nat

2013-04-17 Thread John Tate
Oh wait I've forgot to specify the interface. On Thu, Apr 18, 2013 at 5:45 AM, John Tate wrote: > Well I had the bandwidth the wrong way around for my internet connection. > > I've been trying the other changes and now I have problems, I'm pretty > sure I need to put _out and _in on the end...

Re: pf queueing and nat

2013-04-17 Thread John Tate
Well I had the bandwidth the wrong way around for my internet connection. I've been trying the other changes and now I have problems, I'm pretty sure I need to put _out and _in on the end... # pfctl -nf /etc/pf.conf /etc/pf.conf:39: exactly one scheduler type per interface allowed /etc/pf.conf:39:

Re: pf queueing and nat

2013-04-17 Thread Peter N. M. Hansteen
Stuart Henderson writes: > On 2013-04-17, John Tate wrote: >> Well the ruleset loads, can anyone do a quick check of this in case I've >> done something stupid. I've never used match rules before. I'm not really >> sure how to test queueing to see if it works. > > see "systat queue"; run it as r

Re: pf queueing and nat

2013-04-17 Thread Stuart Henderson
On 2013-04-17, John Tate wrote: > Well the ruleset loads, can anyone do a quick check of this in case I've > done something stupid. I've never used match rules before. I'm not really > sure how to test queueing to see if it works. see "systat queue"; run it as root. > #queues > altq on $ext_if p

Re: pf queueing and nat

2013-04-17 Thread John Tate
Well the ruleset loads, can anyone do a quick check of this in case I've done something stupid. I've never used match rules before. I'm not really sure how to test queueing to see if it works. # $OpenBSD: pf.conf,v 1.50 2011/04/28 00:19:42 mikeb Exp $ # # See pf.conf(5) for syntax and exampl

Re: pf queueing and nat

2013-04-17 Thread John Tate
Found it in the manpage pretty quick;y, silly me, apparently is the same. On Wed, Apr 17, 2013 at 5:16 PM, John Tate wrote: > I can't find any description of the match rules here: > http://openbsd.org/faq/pf/filter.html > > Are they the same syntax as block and pass rules? > > > On Wed, Apr 17,

Re: pf queueing and nat

2013-04-17 Thread John Tate
I can't find any description of the match rules here: http://openbsd.org/faq/pf/filter.html Are they the same syntax as block and pass rules? On Wed, Apr 17, 2013 at 4:56 AM, Peter N. M. Hansteen wrote: > John Tate writes: > > > I think I understand, can someone give me a look at a pf.conf wit

Re: pf queueing and nat

2013-04-16 Thread Peter N. M. Hansteen
John Tate writes: > I think I understand, can someone give me a look at a pf.conf with queueing > and nat rules. With an existing rule set in place, it's probably easier to do the queue assignment with a block of match rules. That way at least you don't affect the pass or block decision. - P

Re: pf queueing and nat

2013-04-16 Thread John Tate
I think I understand, can someone give me a look at a pf.conf with queueing and nat rules. It's hard to experiment because I'm logged in via ssh and would lose my connection every time I make a change. Unfortunately the machine connected to the firewall via null modem for a serial console has died

Re: pf queueing and nat

2013-04-16 Thread carlos albino garcia grijalba
as far as i remember in the man page of pf there are places where u can usually put the queueing rules so nat rules :) > Date: Wed, 17 Apr 2013 03:32:52 +1000 > Subject: pf queueing and nat > From: j...@johntate.org > To: misc@openbsd.org > > I am adding queueing to my pf bas

Re: pf queueing and nat

2013-04-16 Thread Christopher Zimmermann
On Wed, 17 Apr 2013 03:32:52 +1000 John Tate wrote: > I am adding queueing to my pf based nat for my home network. Since > there isn't a complete example involving nat and queuing I am not > entirely sure where to put things. I've read the manual and I think I > put things before the rdr-to rules

pf queueing and nat

2013-04-16 Thread John Tate
I am adding queueing to my pf based nat for my home network. Since there isn't a complete example involving nat and queuing I am not entirely sure where to put things. I've read the manual and I think I put things before the rdr-to rules. I also have a transparent ftp and http proxy. I am not entir