# interface to clients carrier_if="bge1" # interface to uplinks isp_if="bge0" # vlan interfaces for each uplink, all on the isp_if interface, on which altq is setup uplink_if="telecoms" uplink2_if="spnet" uplink3_if="spnet2" #[altq setup and queue setup - snipped] - queue "lap-in" is on carrier_if, queue "lap-out" is on isp_if # ruleset which works pass out on $carrier_if from any to 88.213.194.54 queue lap-in pass out on $uplink_if from 88.213.194.54 to any queue lap-out pass out on $uplink2_if from 88.213.194.54 to any queue lap-out pass out on $uplink3_if from 88.213.194.54 to any queue lap-out # ruleset which doesn't work pass out on $carrier_if from any to 88.213.194.54 flags S/SA keep state queue lap-out pass out on $uplink_if from 88.213.194.54 to any queue lap-out pass out on $uplink2_if from 88.213.194.54 to any queue lap-out pass out on $uplink3_if from 88.213.194.54 to any queue lap-out