Any way to strip DSCP bits from inbound WAN packets?



  • Did some searches and didn't see a whole lot about DSCP… I did see that you can -filter- for FW rules based on DSCP, and put traffic into specific queues, but I am looking for a way in pfSense 2.1 to just completely strip or reset to cs0 (DSCP=0) any and all inbound packets from my ISP.  There's been a guy spamming various ISP/Linux kernel based router threads with a module and instructions to do it on Tomato/DD-WRT platforms but I am hoping there is a command-line for FreeBSD or tweak I can make to pfSense's config?

    Please advise,

    Thanks



  • I know the issue you are talking about as it effects me also. the research I have done leads me to believe it is not possible with the version of pf used in pfsense 2.1 but will be possible in the version used for pfsense 2.2. i'm not expecting pfsense 2.2 for very long time though.  :'(



  • Out of curiosity…why would you want to remove DSCP tags on ingress traffic?

    Or, even more mysterious, why would an ISP add DSCP tags to traffic?



  • Comcast sets 0x08 on all packets for some reason they won't divulge this and doesn't play nice with the WMM function of some wireless drivers(Broadcom at least)



  • @Klaws:

    Out of curiosity…why would you want to remove DSCP tags on ingress traffic?

    Or, even more mysterious, why would an ISP add DSCP tags to traffic?

    Probably nothing, but could be something similar to what my previous ISP was doing – spying on my network so they could justify billing me for having 'too many attached devices'.  Didn't realize back then there was some fine-print stating that they could bill you for having more than 3 'devices' connected to the internet.


Log in to reply