xref: /openbsd/regress/sbin/pfctl/pf35.ok (revision 898184e3)
1intf = "lo0"
2developerhosts = "10.0.0.0/24"
3employeehosts = "10.0.1.0/24"
4altq on lo0 cbq( red ecn ) bandwidth 10Mb qlimit 100 tbrsize 5000 queue { std http mail ssh }
5queue std bandwidth 10% qlimit 1 cbq( default )
6queue http bandwidth 60% priority 2 cbq( red borrow ) { employees developers }
7queue developers bandwidth 60%
8queue employees bandwidth 40%
9queue mail bandwidth 10% priority 0 cbq( red ecn borrow )
10queue ssh bandwidth 20% cbq( borrow ) { ssh_interactive ssh_bulk }
11queue ssh_interactive bandwidth 30% priority 7
12queue ssh_bulk bandwidth 70% priority 0 qlimit 60
13block return out on lo0 inet all queue std
14pass out on lo0 inet proto tcp from 10.0.0.0/24 to any port = 80 flags S/SA queue developers
15pass out on lo0 inet proto tcp from 10.0.1.0/24 to any port = 80 flags S/SA queue employees
16pass out on lo0 inet proto tcp from any to any port = 22 flags S/SA tos 0x10 queue ssh_interactive
17pass out on lo0 inet proto tcp from any to any port = 22 flags S/SA tos 0x08 queue ssh_bulk
18pass out on lo0 inet proto tcp from any to any port = 25 flags S/SA queue mail
19