Re: ALTQ and VoIP

2005-07-03 Thread Matt Pearce
Ingolf Zeiner Petersen wrote: Matt Pearce wrote: I run 1536/256 ADSL here and found that a figure or 205Kb is the upper limit for me (versus the 170Kb you have) , any more and the queue wont drop packets correctly, any less and i'm not getting the full bandwidth i'm paying for. I

Re: ALTQ and VoIP

2005-07-02 Thread Matt Pearce
Ingolf Zeiner Petersen wrote: (256Kbit/s ADSL) altq on rl1 priq bandwidth 170Kb queue { std_out, websrv_out, web_out, im_out, rdp_out, radio_out, ssh_out, dns_out, udp_gaming_out, ip_telefoni_out } I run 1536/256 ADSL here and found that a figure or 205Kb is the upper limit for me (versus

ALTQ Queue length doesnt change

2005-06-07 Thread Matt Pearce
Hi All, Just a quick question regarding ALTQ, I have been trying to shorten the length of the queue yet when I do a pfctl -sq -v I still get a qlength:0/50 even when I thought I have set it to 10. I have included a couple of relevant items below, if more info is needed i'll post it (dont

ALTQ: amount of queue rules

2005-05-24 Thread Matt Pearce
Hi All, I'm about to start working on a few rules for QoS on inbound TCP and was wondering if someone could tell me if there is a maximum of 15 queue's total or whether I can have 15 rules per in and out and/or 15 rules per interface ?? I have had a look around all the documentation and cant

Re: Failed password for root...

2005-05-20 Thread Matt Pearce
tefol tefol wrote: Hi there. I manage several different pf firewalls around the country, and so I need to have ssh access allowed. Occaisionally, (more and more often lately), I get script kiddies having a go at brute forcing my root password (see below) or brute forcing a selection of guesse

Re: Feature request - setting TOS

2005-04-13 Thread Matt Pearce
Peter N. M. Hansteen wrote: Kevin <[EMAIL PROTECTED]> writes: I believe the idea here is to set TOS bits on the packets as they pass through the OpenBSD gateway, so *other* routers in the path can act accordingly, using their own queues and priorities. The two are not necessarily mutually e

Re: load balancing

2005-02-04 Thread Matt Pearce
Daniel Hartmeier wrote: On Fri, Feb 04, 2005 at 05:05:41PM +1100, Matt Pearce wrote: Can someone tell me if the load balancing in PF divides the data amonst the interfaces by packet or connection ?? ie for an outgoing request to a web server with 2x512/512 DSL connection, someone requests a

load balancing

2005-02-03 Thread Matt Pearce
Hi All, Can someone tell me if the load balancing in PF divides the data amonst the interfaces by packet or connection ?? ie for an outgoing request to a web server with 2x512/512 DSL connection, someone requests a download of 20mb, now will this 20mb be restricted to only one of the connection

ALTQ w/priq not doing its job properly

2005-01-19 Thread Matt Pearce
I have been putting ALTQ with the priq disciple through its paces the past week and it doesnt seem to be doing as its told. As you can see from my rules ack traffic is fairly high up on my list and almost exclusively has top priority, however, when i'm running a p2p program on my desktop uploa

Re: Cant pass traffic in to internal ip address-FIXED !!

2005-01-18 Thread Matt Pearce
Sorry for annoying everyone, I have found the problem and am feeling very silly about it too. As it turns out with this new server I am running the config for ppp in the rc.conf (FreeBSD) from my old 4.10, the syntax has changed so it worked but the default ppp was to turn ppp_nat on and I nev

Re: Cant pass traffic in to internal ip address

2005-01-18 Thread Matt Pearce
[EMAIL PROTECTED] wrote: The application may not be NAT compatible. For example, what if it graps your desktop nic ip and tells someone outside your firewall to connect to 555.555.555.555 Some applications have a user setting that might help... Citix (clusters), for example, had a setting for t

Cant pass traffic in to internal ip address

2005-01-17 Thread Matt Pearce
Hi All, I'm new to pf so bear with me if i'm asking a silly question. ok, backround info. I have an external ip of 444.444.444.444/32 (real world routable) and a block of addresses 333.333.333.333/29 (also real world routeable). Now on my desktop pc 555.555.555.555 I am running a p2p program.

PF, ALTQ, Priq & RED

2005-01-02 Thread Matt Pearce
Hi All, This is my first post to this list as I couldnt find the answers I am looking for in the archives. Ok, I am running FreeBSD 5.3 with PF and ALTQ and am struggling a little with the altq rules a little. Now my questions are:- If I am running 2 rules for udp packets to be prioritized and