From owner-freebsd-pf@FreeBSD.ORG Wed Dec 1 08:28:02 2004 Return-Path: Delivered-To: freebsd-pf@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 8591016A4CE for ; Wed, 1 Dec 2004 08:28:02 +0000 (GMT) Received: from rproxy.gmail.com (rproxy.gmail.com [64.233.170.192]) by mx1.FreeBSD.org (Postfix) with ESMTP id 19B8B43D1D for ; Wed, 1 Dec 2004 08:28:02 +0000 (GMT) (envelope-from dr.clau@gmail.com) Received: by rproxy.gmail.com with SMTP id 34so238449rns for ; Wed, 01 Dec 2004 00:27:59 -0800 (PST) DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=beta; d=gmail.com; h=received:return-path:message-id:disposition-notification-to:date:from:user-agent:x-accept-language:mime-version:to:cc:subject:references:in-reply-to:x-enigmail-version:x-enigmail-supports:content-type; b=mHOYwx+cVC55w6xB9AJxlAnWtL02R2OISiXjpDGKjSZQXoo2e0A1B/1Pr0AdBotvVWH7p0TIiVMOBSAKWquiaprK/6EhmpBIP28F4ngJE7AGswl6CPZdRqJ1MzK4m8JuvNDsT5caEu483sn0se7rdUs5gTJii1JncEFWxkoWMKs= Received: by 10.38.8.67 with SMTP id 67mr10667rnh; Wed, 01 Dec 2004 00:27:59 -0800 (PST) Received: from ?82.79.29.15? ([82.79.29.15]) by smtp.gmail.com with ESMTP id 62sm2962rna; Wed, 01 Dec 2004 00:27:59 -0800 (PST) Message-ID: <41AD80D3.3090005@gmail.com> Date: Wed, 01 Dec 2004 10:29:07 +0200 From: Claudiu Dragalia-Paraipan User-Agent: Mozilla Thunderbird 0.9 (X11/20041125) X-Accept-Language: en-us, en MIME-Version: 1.0 To: Robert M References: <20041130220750.75198.qmail@web52202.mail.yahoo.com> In-Reply-To: <20041130220750.75198.qmail@web52202.mail.yahoo.com> X-Enigmail-Version: 0.89.0.0 X-Enigmail-Supports: pgp-inline, pgp-mime Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="------------enig35989E87B6FF80149BB7A688" cc: freebsd-pf@freebsd.org Subject: Re: 3 gateways problem X-BeenThere: freebsd-pf@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Technical discussion and general questions about packet filter (pf) List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 01 Dec 2004 08:28:02 -0000 This is an OpenPGP/MIME signed message (RFC 2440 and 3156) --------------enig35989E87B6FF80149BB7A688 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Try to add 'flags S/SA' to your route-to rules. If it does not work, watch with pfctl -vsr and -vsn which rules you hit and when. Check if states are created for connection coming from outside with pfctl -ss. Regards, Robert M wrote: > Hi, > > Thank your for your reply. > > I have read the manual before. > > I did try adding the following lines to > the end of my pf.conf file, but this didn't help > though. > > --- > pass out on $ifDSL1 route-to ($ifDSL2 $gwDSL2) from > $ifDSL2 to any > pass out on $ifDSL1 route-to ($ifDSL3 $gwDSL3) from > $ifDSL3 to any > pass out on $ifDSL2 route-to ($ifDSL1 $gwDSL1) from > $ifDSL1 to any > pass out on $ifDSL2 route-to ($ifDSL3 $gwDSL3) from > $ifLimes to any > pass out on $ifDSL3 route-to ($ifDSL1 $gwDSL1) from > $ifDSL1 to any > pass out on $ifDSL3 route-to ($ifDSL2 $gwDSL2) from > $ifDSL2 to any > ---- > > Maybe I misunderstood the 'meaning' of these rules ? > > I'm suspecting a "bug" in pf.conf file :-( > > Ps. do you know any website where I can learn > about advanced pf/altq networking ? > I would like to simply limit internet speed > to 256Kbit/s with priq in each queue to every user on > my 2Mbit line. > > Thank you! > > Regards, > -- Claudiu Dragalina-Paraipan dr.clau@gmail.com --------------enig35989E87B6FF80149BB7A688 Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.6 (FreeBSD) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFBrYDYm0FWxb+swkQRAn8kAKCH8nISJTh+gJear5S+aersQJLJmACfWnnw UxjTfJ+2jw3aA9/Rg4XGSvM= =KJRn -----END PGP SIGNATURE----- --------------enig35989E87B6FF80149BB7A688--