On Tue, Feb 27, 2007 at 12:40:41PM -0700, Tim Kuhlman wrote:
quoted text
> On Tuesday 27 February 2007 11:31 am, Albert Chin wrote:
> > [ snip snip ]
> 
> You are queueing on fxp1 on the external firewall. This should
> affect traffic going from the external firewall to the www/ftp
> server, however it sounds like you are trying to affect traffice
> moving the opposite direction.

Correct, that's what I want.

quoted text
> To quote from the pf faq,
>
> "Note that queueing is only useful for packets in the outbound
> direction. Once a packet arrives on an interface in the inbound
> direction it's already too late to queue it -- it's already consumed
> network bandwidth to get to the interface that just received it. The
> only solution is to enable queueing on the adjacent router or, if
> the host that received the packet is acting as a router, to enable
> queueing on the internal interface where packets exit the router."

Thanks.

-- 
albert chin (china@thewrittenword.com)