On Tue, Jun 24, 2003 at 03:38:33PM -0500, Jonathan Kennedy wrote: > I'm having a different problem now though. When I initiate an ssh > connection from the internet->gateway, pfctl -v -v -s queue shows > that a few packets are going into the ext_ssh queue when the connection > is first established. After that, there are no other packets going into > ext_ssh as I enter commands. I am expecting packets going out from the > server, such as the response to an 'ls' command, would be queued in > ext_ssh as per this rule: > > pass in on xl0 inet proto tcp from 66.45.X.X/32 to any port 22 \ > flags S/SA keep state queue (ext_ssh, ext_pri)
no, they should NOT go to ssh_ext, they should go to ext_pri. this is interactive traffic with ToS set to lowdelay and thus go to the prioruty queue you specified here explicitely. -- Henning Brauer, BS Web Services, http://bsws.de [EMAIL PROTECTED] - [EMAIL PROTECTED] Unix is very simple, but it takes a genius to understand the simplicity. (Dennis Ritchie)