Limiter bandwidth: Only for some site (alias - mail.server.com etc)

[cybermod]

Hi guy, i am some problem to understand firewall rule.

I need to limiter bandwidth for clients in my lan, and this is not a problem (trafic shaper, limiter and rule with link in/out).

But: i want that this limit is not applied if my clients call the remote mail server (name: mail.serverexample.com).

I think that the right way is to create an ALIAS.

what is the better method? how i can test if the limit is not applied?

[ptt]

Is it just 1 mail server (1 IP address) ?

Create a "Pass" rule, above the rule with the "In/Out Limiter" rule, with the Mail Server IP address as Destination, and without the "In/Out Limiter"…. that should do the trick ;)

[cybermod]

hi ppt, tnx for your reply

i need limit but not for my mail server.  but, if i have round robin (ex mail.server.it with first server one ip and second server one ip) how i can do?)

[ptt]

Create a Alias with the 2 IP's, and use the Alias as Destination in the FW Rule ;)

[cybermod]

:o it's true!!!! …. i am a stupid boy tnx so much, i try it!

[phil.davis]

and you can make an Alias using the FQDN of the mail server. Use that Alias as the destination in the pass rule. pfSense will learn all the IP addresses associated with the name. That saves you problems if the IP addresses change.

[cybermod]

Hi phil, because i don't want to make mistakes

FQDN= mail.myhostnameserver.com

Right?

[maverick_slo]

I`m not Phil but can answer you: right :)

[cybermod]

ahahhha, tnx maverick!

Regards

Alex