summaryrefslogtreecommitdiff
path: root/regress/sbin/pfctl/pf33.in
blob: 41328dac5aa5272a5de603271b075e2967929a87 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
ext_if = "lo0"

altq on $ext_if scheduler cbq bandwidth 10Mb \
    queue { deflt, http, ssh, mail, rsets }
queue	deflt bandwidth 10% priority 0 cbq(default ecn)
queue	http bandwidth 1.5Mb priority 3 { http_vhosts, http_cust1 }
queue	 http_vhosts bandwidth 40% cbq(borrow red)
queue	 http_cust1 bandwidth 0.5Mb
queue	mail bandwidth 10% priority 1
queue	ssh bandwidth 100Kb priority 7 cbq(borrow)
queue	rsets bandwidth 7500b priority 0 cbq(red)

block return in on $ext_if inet all queue rsets
pass in on $ext_if inet proto tcp from any to any port 80 keep state queue http
pass out on $ext_if inet proto tcp from any to any port 22 keep state queue ssh
pass in  on $ext_if inet proto tcp from any to any port 22 keep state queue ssh
pass out on $ext_if inet proto tcp from any to any port 25 keep state queue mail
pass out on $ext_if inet all keep state