Re: problem with a route-to option within an anchor

2007-09-03 Thread Daniel Hartmeier
On Mon, Sep 03, 2007 at 08:17:45AM +0200, Tobias Marx wrote: ### outgoing http loadbalancing ### anchor http_out out on $extif_1 from clients to any load anchor http_out from /bla/http_out And the problem is? You get a syntax error when trying to load the ruleset? If so, from which file?

Re: traffic shaping using pf

2007-09-03 Thread Russell Fulton
I take it from the silence that the answer is that pf lacks this functionality at the moment. Bother :) What would the overhead be of setting up a queue for every source address (1024 of them) ? Will this impact performance? R Russell Fulton wrote: Thanks for your response Paul (and

Re: traffic shaping using pf

2007-09-03 Thread Daniel Hartmeier
On Mon, Sep 03, 2007 at 10:22:53PM +1200, Russell Fulton wrote: I take it from the silence that the answer is that pf lacks this functionality at the moment. Bother :) Yes, that's correct. What would the overhead be of setting up a queue for every source address (1024 of them) ? Will

Re: problem with a route-to option within an anchor

2007-09-03 Thread Daniel Hartmeier
On Mon, Sep 03, 2007 at 11:37:22AM +0200, Tobias Marx wrote: can someone verify this behaviour? I doubt this has anything to do with anchors. To verify, you can move the contents of http_out into the main ruleset (and remove the anchor call), and reboot, as a test. Watch out for error messages

Re: problem with a route-to option within an anchor

2007-09-03 Thread marx . tobias
i have found the reason for the described behaviour. it`s the state-policy, see the description below. My first guess would be the interfaces. If either $ext_if1 or $ext_if2 do not exist at ruleset load time (because they're not physical interfaces like xl0, but tun0 or such), you should