All pastes #673749 Raw Edit

Something

public text v1 · immutable
#673749 ·published 2007-08-28 17:16 UTC
rendered paste body
# interface to clients
carrier_if="bge1"

# interface to uplinks
isp_if="bge0"

# vlan interfaces for each uplink, all on the isp_if interface, on which altq is setup
uplink_if="telecoms"
uplink2_if="spnet"
uplink3_if="spnet2"

#[altq setup and queue setup - snipped] - queue "lap-in" is on carrier_if, queue "lap-out" is on isp_if

# ruleset which works
pass out on $carrier_if from any to 88.213.194.54 queue lap-in
pass out on $uplink_if from 88.213.194.54 to any queue lap-out
pass out on $uplink2_if from 88.213.194.54 to any queue lap-out
pass out on $uplink3_if from 88.213.194.54 to any queue lap-out

# ruleset which doesn't work
pass out on $carrier_if from any to 88.213.194.54 flags S/SA keep state queue lap-out
pass out on $uplink_if from 88.213.194.54 to any queue lap-out
pass out on $uplink2_if from 88.213.194.54 to any queue lap-out
pass out on $uplink3_if from 88.213.194.54 to any queue lap-out