Hi,
I tried to enable device pooling in advanced options (the only one thing
I changed on reboot and it lead to traffic shaping breakage):
# pfctl -f /tmp/rules.debug
/tmp/rules.debug:14: no scheduler specified!
/tmp/rules.debug:15: no scheduler specified!
/tmp/rules.debug:17: queue qWANRoot has no parent
/tmp/rules.debug:17: errors in queue definition
/tmp/rules.debug:18: syntax error
/tmp/rules.debug:19: queue qLANRoot has no parent
/tmp/rules.debug:19: errors in queue definition
/tmp/rules.debug:20: syntax error
/tmp/rules.debug:21: syntax error
/tmp/rules.debug:22: syntax error
/tmp/rules.debug:23: syntax error
/tmp/rules.debug:24: syntax error
/tmp/rules.debug:25: syntax error
/tmp/rules.debug:26: syntax error
pfctl: Syntax error in config file: pf rules not loaded
These basically correspond to:
scrub on em0 all
altq on em0 bandwidth 100Mb queue { qWANRoot }
altq on em1 bandwidth 1000Mb queue { qLANRoot }
queue qWANRoot bandwidth 20000Kb priority 6 { qWANdef, qWANacks,
qOthersUpH, qOthersUpL }
queue qWANdef bandwidth 1% priority 3 ( default upperlimit(100% 100
90%) linkshare(0% 1000 10%) realtime(10% 1 10%) )
queue qLANRoot bandwidth 20000Kb priority 6 { qLANdef, qLANacks,
qOthersDownH, qOthersDownL }
queue qLANdef bandwidth 1% priority 3 ( default upperlimit(100% 100
90%) linkshare(0% 1000 10%) realtime(10% 1 10%) )
queue qLANacks bandwidth 1% priority 6 ( upperlimit(80% 1 80%)
linkshare(0% 1000 10%) realtime(10% 1 10%) )
queue qWANacks bandwidth 1% priority 6 ( upperlimit(80% 1 80%)
linkshare(0% 1000 10%) realtime(10% 1 10%) )
queue qOthersUpH bandwidth 1% priority 4 ( red ecn upperlimit(100% 100
90%) linkshare(0% 1000 10%) realtime(1Kb 1 1Kb) )
queue qOthersDownH bandwidth 1% priority 4 ( red ecn upperlimit(100%
100 90%) linkshare(0% 1000 10%) realtime(1Kb 1 1Kb) )
queue qOthersUpL bandwidth 1% priority 2 ( red ecn upperlimit(100% 100
90%) linkshare(0% 1000 10%) realtime(1Kb 1 1Kb) )
queue qOthersDownL bandwidth 1% priority 2 ( red ecn upperlimit(100%
100 90%) linkshare(0% 1000 10%) realtime(1Kb 1 1Kb) )
Also which worries me even more is the fact pfsense seems to switch to
"allow everything" mode in this case which is kind of dangerous.
I guess there are some safeguards need to be implemented against it.
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
