Re: PF NAT altq

[Leo Galambos <leog@centrum.cz>]

I'm sorry, but I cannot see any missing parts...yes, the variables are 
not set (I did copy the important lines only), but you can see, that 
queue limit is set, nat is active, outgoing packets should be pass 
through altq and due to keep state, I hope, the incoming stream is 
limited as well...

Cheers,
Leo

Stephen Flanagan napsal(a):

> I saw in comparison to the example that you were missing some elements 
> of configuration..
> take a second look.
> http://www.openbsd.org/faq/pf/queueing.html#example2
>
> Leo Galambos wrote:
>
>> Hi,
>>
>> I would like to limit the bandwith consumed by my NAT clients. 
>> Unfortunately, if I use the configuration presented below, they can 
>> still run at full speed (10Mbps). I guess, I missed some point in the 
>> PF guide, but I cannot find the bug in my PF rules. Can you help me, 
>> please?
>>
>> Thank you.
>> Leo
>>
>> # uname -a
>> OpenBSD fw.egothor.org 3.4 GENERIC#18 i386
>>
>> nat on $ext_if from $internal_net to any -> ($ext_if)
>>
>> altq on $ext_if bandwidth 40Kb cbq queue { outpipe }
>> queue outpipe bandwidth 100% cbq(default)
>> block in log all
>> pass  quick on lo0 all keep state
>> pass  out on $ext_if inet proto { tcp, udp, icmp } all keep state 
>> queue outpipe