Navigation

    Netgate Discussion Forum
    • Register
    • Login
    • Search
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search

    BANDWIDTHD Filter out local traffic?

    pfSense Packages
    2
    7
    5115
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • A
      Alan87i last edited by

      I want to make Bandwidthd NOT score local traffic.
      I have been all over the net searching and found this ""  not((src net 192.168.1) and (dst net 192.168.1))  ""  to put in the filter .
      When I try it to match my subnet or as is Bandwidthd's service stops and will not start.

      Any tips on how to make this happen on PF 1.2.3?
      Thanks

      1 Reply Last reply Reply Quote 0
      • N
        norf last edited by

        I'm using:
        "ip and not ((src net 192.168.1) and (dst net 192.168.1))"
        Make sure to include the quotes.

        I can't work out how to drop arp and brodcast packets though, in theory something along the lines of the below should work but just causes the BandwidthD to not start.

        ""ip and not (((src net 192.168.1) and (dst net 192.168.1)) or (net 192.168.1.255) or (proto arp))"

        More info on the syntax can be found here http://developer.apple.com/mac/library/documentation/Darwin/Reference/ManPages/man7/pcap-filter.7.html

        1 Reply Last reply Reply Quote 0
        • A
          Alan87i last edited by

          Did you have to restart the router to make it work?
          I tried it again and the Bandwidth service stoppes and will not start after saving the code in the filter.

          1 Reply Last reply Reply Quote 0
          • N
            norf last edited by

            Sorry I had one too many "'s I've updated my post give that a go now.

            1 Reply Last reply Reply Quote 0
            • A
              Alan87i last edited by

              That seemed to do the trick for the local traffic. Thanks
              Now I have two PF sense boxs
              each on it's own modem and on different LAn subnets with the OPT1 lan set up on each box with a static route. SO Users can access servers on each lan.

              Lan 1 168.0.x lan 2 is 168.25.x and opt 1 is 168.15.x  Is there a way to filter out traffic from either lan through the static route at the same time?

              1 Reply Last reply Reply Quote 0
              • N
                norf last edited by

                Dropping the tailing .1 should stop any internal traffic being filtered.

                "ip and not ((src net 192.168) and (dst net 192.168))"

                Or you could use a larger statement to catch individual connections. eg the below won't capture traffic between 192.168.1.x addresses and traffic between 192.168.1.x addresses and 192.168.25.x

                "ip and not (((src net 192.168.1) and (dst net 192.168.1) or ((src net 192.168.1) and (dst net 192.168.25)) or ((src net 192.168.25) and (dst net 192.168.1)))"

                1 Reply Last reply Reply Quote 0
                • A
                  Alan87i last edited by

                  Thanks
                  Dropping the 1 seems to have worked . Excellent!!

                  1 Reply Last reply Reply Quote 0
                  • First post
                    Last post