🚀 go-pugleaf

Uzytkownik "user" <NO_SPA...@make.one.pl> napisal w wiadomosci
news:c5s9vs$hvv$1@inews.gazeta.pl...
> Witam
> do kolejkowania ruchu wychodzacego uzyj tagowania:)
> mialem ten sam problem i ktos mnie naprawodzil zeby wlasnie uzyc tagowania
> narazie nie wiem czy dziala bo robilem to zdalnie a nie ma znajomego
> zeby sprawdzil wiec jak ty zrobisz to u siebie to powiesz czy dziala
>
> pass in on $int_if proto tcp from $user1 to any tag test flags S/SA keep
> state queue user1
>
> pass out on $ext proto tcp all tagged test modulate state flags S/SA
> queue user1_out
>
>
> pozdrawiam
> Albert

Wyprobowalem ten sposob i nie pomoglo. Moze cos zle ustawilem?
Oto moj pf.conf po modyfikacji:

--------

ext_if="rl0"    # replace with actual external interface name i.e., dc0
int_if="rl1"    # replace with actual internal interface name i.e., dc1

altq on $ext_if bandwidth 2Mb cbq queue { default }
queue default bandwidth 100% cbq(default) {  ja, reszta }
#queue ozi bandwidth 5% cbq(red)
queue ja bandwidth 90% cbq(red)
queue cafe bandwidth 5% cbq(red)

nat on $ext_if from 192.168.20.0/24 to any -> 195.205.200.254
rdr on $int_if proto tcp from any to any port 21 -> 127.0.0.1 port 8021

pass in on $int_if proto tcp from 192.168.20.0/26 to any tag test flags S/SA
keep state queue reszta
pass out on $ext_if proto tcp all tagged test modulate state flags S/SA
queue reszta

pass in on $int_if proto tcp from 192.168.20.185 to any tag test flags S/SA
keep state queue ja
pass out on $ext_if proto tcp all tagged test modulate state flags S/SA
queue ja

pass in on $ext_if proto tcp from any to 195.205.200.254 port auth \
    flags S/SA synproxy state
pass in quick on lo0 all

antispoof for $int_if inet

block out on $ext_if inet proto { tcp, udp } from any to any port 4000><6660
block out on $ext_if inet proto { tcp, udp } from any to any port 1214
block out on $ext_if inet proto { tcp, udp } from any to any port 8711
block out on $ext_if inet proto { tcp, udp } from any to any port 6800><6899
block out on $ext_if inet proto { tcp, udp } from any to any port 2200><2300

--------

Jesli nie w konfiguracji tkwi blad tylko w sprzecie? Mam karty sieciowe
realteka, na http://cvs.openbsd.org/faq/pf/pl/perf.html pisze ze karty
realteka sa slabej jakosci i moze dlatego nie dziala ?
Czekam na jakies sugestie

Pozdrawiam