Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    PfSense Mis-shaping traffic

    Scheduled Pinned Locked Moved Traffic Shaping
    12 Posts 5 Posters 2.3k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • F
      FireBean
      last edited by

      @Harvy66:

      Can we see your rules?

      Sure thing. I added it to the original post. :)

      1 Reply Last reply Reply Quote 0
      • H
        Harvy66
        last edited by

        Your rule description says "outbound". Which interfaces and which direction do your P2p floating rules apply to?

        1 Reply Last reply Reply Quote 0
        • F
          FireBean
          last edited by

          huh… I never noticed that. I would like to make it watch both inbound and outbound...

          Where is the setting for that and is there a way to apply that quickly?

          1 Reply Last reply Reply Quote 0
          • KOMK
            KOM
            last edited by

            I thought the entire point of floating rules was to abstract them above a particular interface or direction?….

            1 Reply Last reply Reply Quote 0
            • F
              FireBean
              last edited by

              @KOM:

              I thought the entire point of floating rules was to abstract them above a particular interface or direction?….

              Exactly! So…. what is going on here?

              1 Reply Last reply Reply Quote 0
              • H
                Harvy66
                last edited by

                @KOM:

                I thought the entire point of floating rules was to abstract them above a particular interface or direction?….

                Sometimes you get a rule that like port 1-64000. Instead of setting your rule to match incoming or outgoing, you can set the destination on outgoing only as not to accidentally mark random client ports.

                1 Reply Last reply Reply Quote 0
                • KOMK
                  KOM
                  last edited by

                  Thanks, I hadn't thought of that.

                  1 Reply Last reply Reply Quote 0
                  • F
                    FireBean
                    last edited by

                    So Get this… I made some changes and I don't even have my VOIP rule in place in the floating list and somehow it is applying my Ooma Telo to the voip queue.  :o

                    so, I formatted the entire thing and tried from scratch... SAME THING.

                    How/where are these rules defined in a file? I want to see if the GUI is REALLY showing what is going on....

                    Side Note
                    I triple checked all my rules, I don't have a blanket rule that uses that many ports.

                    1 Reply Last reply Reply Quote 0
                    • D
                      doktornotor Banned
                      last edited by

                      @FireBean:

                      How/where are these rules defined in a file?

                      
                      pfctl -vvsr
                      
                      
                      1 Reply Last reply Reply Quote 0
                      • N
                        Nullity
                        last edited by

                        Can a single queue handle both In and Out traffic simultaneously? I think no.

                        If you create "qArb" on both WAN and LAN, you only need to assign traffic once and the returning traffic will find the properly named queue automatically, iirc. I think the Wizard makes use of this method.

                        As a general rule with pfSense, use precise, simple rules to ease later trouble-shooting. Broad rules with superfluous options can create an angry and frustrated admin.

                        Please correct any obvious misinformation in my posts.
                        -Not a professional; an arrogant ignoramous.

                        1 Reply Last reply Reply Quote 0
                        • First post
                          Last post
                        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.