Traffic shaping for all connections except company email server

ast

hi!

We have pfsense box in the office and we use traffic shaping to limit the bandwidth for some clients, just wondering, can we set a firewall rule to NOT limit the connection of some clients connection to email servers? Email servers can be google mail server, yahoo mail or our own domain email.

TIA!

ast

ast

Anyone can help me? :)

Nullity

It's seemingly a very simple thing to accomplish.

What have you tried so far and what were the problems you encountered?

ast

I'm able to traffic shape some clients, but its for all their connections. I want to exclude our office email server (mail.xxxxxxx.com) from the limiter for faster downloading and sending of emails.

ast

Any tip on how to do this simple thing? :)

jahonix

@Nullity:

…what were the problems you encountered?

Setting up a matching firewall rule on top of the others?

ast

@jahonix:

@Nullity:

…what were the problems you encountered?

Setting up a matching firewall rule on top of the others?

I need to put the "allow connection to company email server rule" on top of the traffic shaper rule?

Derelict

You need to place a rule above the rule that puts the traffic in the queues. It should pass traffic from the local addresses you want to exempt with a destination of the mail server address. On that rule you can either set another higher priority queue or no queue at all since you're using limiters.

You probably want to make a host alias using the mail host names for google and yahoo. such as hosts smtp.gmail.com, pop.gmail.com, and imap.gmail.com and whatever yahoo is doing these days. Webmail will be more difficult to identify the traffic.

Anyway, you figure out how to identify the traffic you want to exempt from the limiters and pass that traffic without setting a limiter above the limiter rules.

ast

Thanks a lot for the advice, I have blocked webmail services via firewall rule already.