My ungodly PF config - am I sane and brilliant, or just deluded and dangerous?

[Vivek Khera]

On Dec 16, 2005, at 1:13 AM, J. Buck Caldwell wrote:

> Here's the fun part. Our traffic has gotten to the point where I've  
> decided that some traffic shaping (ALTQ) is necessary. I've been  
> experimenting with my home cable internet connection (and gif  
> tunnel to work), and I believe I've come up with a workable  
> solution. However, I'd like to run it by some experts to see if I'm  
> screwing up (or hitting any possible limits) before I try putting  
> it in place live.

You may wish to take a look at an embedded GUI based firewall system  
like pfSense to help you configure this.  It has a traffic shaping  
wizard and can do IPsec VPNs as well.  It is based on FreeBSD 6.0 so  
will run on whatever hardware you've got already.

See http://www.pfsense.com/