Quote:
Originally Posted by MarcRiv
Code:
match in on $extif proto tcp from any to any port 25 queue (i_mail, i_ack)
match out on $extif proto tcp from any to any port 25 queue (e_mail, e_ack)
Am I any closer than I was? lol |
"match" is new in the 4.6; if I'm up to speed on it correctly, match inspects EVERY packet (regardless of statefulness) on the specified interface. A more efficient rule fragment may be,
Code:
pass in on $extif inet proto tcp \
from any to ($extif:0) port 25 \
keep state queue(i_mail,i_ack)
In using a pass-rule with state there's a performance benefit of NOT having to inspect packets that qualify as stateful. By including the queue() on the pass rule you get queuing for matching rule and stateful packets.