Building the Network You Need with OpenBSD's PF: EuroBSDCon, St. Julian's, September 26th 2013 | ||
---|---|---|
Prev | Next |
OpenBSD 5.0 alert: Per rule priority for basic shaping, priorities 0 through 7 (general default 3, others such as ssh have beefed up prio)
The Hartmeier example rewritten with prio:
pass out on $ext_if proto tcp from $ext_if prio (3, 7) pass in on $ext_if proto tcp to $ext_if prio (3,7)
as match rules:
match out on $ext_if proto tcp from $ext_if prio (3, 7) match in on $ext_if proto tcp to $ext_if prio (3, 7)
Slightly changed syntax for OpenBSD 5.2:
pass out on $ext_if proto tcp from $ext_if set prio (3, 7) pass in on $ext_if proto tcp to $ext_if set prio (3,7)
as match rules:
match out on $ext_if proto tcp from $ext_if set prio (3, 7) match in on $ext_if proto tcp to $ext_if set prio (3, 7)
And you can sprinkle liberally across your rules