PF 问题

kenlin66

提示：
pfctl: the sum of the child bandwidth higher than parent "root_rl0"
pfctl: the sum of the child bandwidth higher than parent "root_rl0"

我的pf.conf：

int_if="rl0"
ext_if="fxp0"
mypc="192.168.123.168"
scrub in on $ext_if all

altq on $int_if cbq bandwidth 2Mb queue {std_in,www_in,mypc_in}
queue std_in cbq(default)
queue www_in bandwidth 500Kb cbq(borrow)
queue mypc_in priority 5 cbq(red)

nat on $ext_if from $int_if:network to any ->($ext_if)
rdr on $ext_if proto {tcp,udp} from any to any port {3389,5900} ->192.168.123.168

pass out on $ext_if from any to any keep state
pass in on $ext_if proto {tcp,udp} from any to $mypc port {3389,5900} flags S/SA synproxy state

[ 本帖最后由 kenlin66 于 2008-1-4 10:32 编辑 ]

zhangweizj

1. altq on $int_if cbq bandwidth 2Mb queue {std_in,www_in,mypc_in}
   
2. queue std_in cbq(default)
   
3. queue www_in bandwidth 500Kb cbq(borrow)
   
4. queue mypc_in priority 5 cbq(red)

复制代码

看样子是这里出问题了。

1. child bandwidth higher than parent

复制代码

子带宽高于父带宽的意思吧。，呵呵

nat on $ext_if from $int_if:network to any ->($ext_if) rdr on $ext_if proto {tcp,udp} from any to any port {3389,5900} ->192.168.123.168 pass out on $ext_if from any to any keep state pass in on $ext_if proto {tcp,udp} from any to $mypc port {3389,5900} flags S/SA synproxy state nat on $ext_if from $int_if:network to any ->($ext_if) rdr on $ext_if proto {tcp,udp} from any to any port {3389,5900} ->192.168.123.168

还有以上这两句语法一摸一样，我不知道这么做为了什么。。

[ 本帖最后由 zhangweizj 于 2008-1-4 09:45 编辑 ]

kenlin66

不好意思。。那是我复制过来的时候重复了。我现在把他修过来。。

但为什么会出现那样的提示呢，真的不明白。不知道这是不是个BUG。