Traffic shaping incomming traffic for all vlans

[Radek Krejča]

Hello,

I have freebsd router with pf for NAT and firewall. There are 2 NICs, one for incomming traffic from internet and second for traffic to clients. On internal NIC are a lot of vlans.

I need to make traffic shaping for all users based on src ip from internet. But I have problem, it doesnt work.

Working rule for block all traffic is:

block quick proto { tcp, udp } from 192.168.52.0/24 

but the same rule with externa nic dosnt match: block quick on $ext_if proto { tcp, udp } from 192.168.52.0/24
Why?

And second problem - how to set up (on which interface) altq queues?

Thank you very much.
Radek