Traffic Shaping with pf ...

[Maxim Tuliuk]

On Wed, Nov 16, 2005 at 23:19 +0100, Max Laier wrote:
> > on an interface. Since most of the traffic passing through my firewall
> > is http and ftp traffic, the inbound direction is the path being
> > saturated. Did I read the ALTQ documentation wrong or is there another
> > mechanism available for use with pf that could help me prioritize
> > bandwidth usage?
> 
> You can not control inbound traffic!  You can not control what other people 
> sent to you!  It's impossible.  The only way to do it is to limit *outbound* 
> traffic on an upstream router.

But if I'm an ISP, I have to control inbound traffic (botnets, contract
agreements etc); in this case rate limit is the simplist and cheapest way
-- 
Maxim Tuliuk
WWW: http://primats.org.ua/~mt/
ICQ: 21134222

The bike is absolute freedom of moving