Hello Everyone,

We have a number of businesses that share a T1.  Recently, we've installed an
asterisk box and are using VOIP.  We would like to prioritize voip traffic
above everything else.  Instead of making everyone reconfigure their servers,
we decided to first try to do a transparent bridge.  I believe the other
option is a 1:1 Nat.  (Maybe there is a better way?).

I have the bridge working.  And, after going through the traffic shaper
wizard, I am seeing packets flow into the qVOIPDown queue.  But never in the
qVOIPUp queue.  I assume the rules are processed in order, so here are the
voip rules which are at the top in the traffic shaper wizard.  They look like 
this...

LAN->WAN   UDP   LAN net   * Port: 10000 - 20000            qVOIPUp/qVOIPDown
WAN->LAN   UDP   *            LAN net Port: 10000 - 20000   qVOIPDown/qVOIPUp

When I do a packet capture on the pfsense bridge, this is what I see:

09:42:07.783542 IP 64.2.142.17.17500 > 65.116.16.98.11162: UDP, length 172
09:42:07.789149 IP 65.116.16.98.11162 > 64.2.142.17.17500: UDP, length 172
09:42:07.803118 IP 64.2.142.17.17500 > 65.116.16.98.11162: UDP, length 172
09:42:07.809237 IP 65.116.16.98.11162 > 64.2.142.17.17500: UDP, length 172
09:42:07.823247 IP 64.2.142.17.17500 > 65.116.16.98.11162: UDP, length 172
09:42:07.829204 IP 65.116.16.98.11162 > 64.2.142.17.17500: UDP, length 172
09:42:07.843189 IP 64.2.142.17.17500 > 65.116.16.98.11162: UDP, length 172
09:42:07.849575 IP 65.116.16.98.11162 > 64.2.142.17.17500: UDP, length 172

I see traffic in all the other "Up" queues, so it doesn't appear to be a
problem in general.  Is there any way for me to debug why a particular packet
doesn't go into a particular queue?

---

Oddly enough, we also have an asterisk provider which uses port 4569.  I have
two rules which mirror those above, but use port 4569.

LAN->WAN   UDP   LAN net   * Port: 4569            qVOIPUp/qVOIPDown
WAN->LAN   UDP   *            LAN net Port: 4569   qVOIPDown/qVOIPUp

Packet Capture on pfsense bridge:

10:05:54.783763 IP 208.72.186.66.4569 > 65.116.16.98.4569: UDP, length 34
10:05:54.787024 IP 65.116.16.98.4569 > 208.72.186.66.4569: UDP, length 46
10:05:54.882939 IP 208.72.186.66.4569 > 65.116.16.98.4569: UDP, length 12
10:05:54.883056 IP 208.72.186.66.4569 > 65.116.16.98.4569: UDP, length 18
10:05:54.888387 IP 65.116.16.98.4569 > 208.72.186.66.4569: UDP, length 12

Unfortunately, in this case, neither up nor down ever goes into the VOIP
Queues.

So, it would be really helpful for me to be able to figure out why these
packets aren't getting caught by these 4 rules.  Any ideas?  Am I missing
something stupid?

It's hard to tell for sure with other traffic on the T1, but it appears that
the "Up" traffice goes through the qwandef queue which is fed by rules
further down the list.

Thanks,

-Chris

Pfsense: 1.2RC2

---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to