> works just as good as it possibly could if pf had a "download" queue > mechanism, if not better.
This works adequetly (How could it be "better"? Sounds like zealot speak to me.) if the boxes only function is NAT, but if it also runs external services queueing inbound traffic on the internal interface doesn't work, because external services get priority. Kestas