/* $Id$ */
/*
traffic_shaper_wizard.xml
part of pfSense (http://www.pfsense.org/)
Copyright (C) 2005 Bill Marquette - bill.marquette@gmail.com.
All rights reserved.
Redistribution and use in source and binary forms, with or without
modification, are permitted provided that the following conditions are met:
1. Redistributions of source code must retain the above copyright notice,
this list of conditions and the following disclaimer.
2. Redistributions in binary form must reproduce the above copyright
notice, this list of conditions and the following disclaimer in the
documentation and/or other materials provided with the distribution.
THIS SOFTWARE IS PROVIDED ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES,
INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY
AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE
AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY,
OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
POSSIBILITY OF SUCH DAMAGE.
*/
8
1
pfSense Traffic Shaper Wizard
true
This wizard will guide you through setting up the pfSense traffic shaper.
Next
submit
Going any further will wipe your existing shaper config! If you do not wish to continue, please click the pfSense logo at the top to return to the webConfigurator.
/* wipe previous */
unset($config['shaper']['queue']);
unset($config['shaper']['rule']);
unset($config['interfaces']['wan']['bandwidth']);
unset($config['interfaces']['wan']['bandwidthtype']);
unset($config['interfaces']['lan']['bandwidth']);
unset($config['interfaces']['lan']['bandwidthtype']);
$config['shaper']['enable'] = FALSE;
2
pfSense Traffic Shaper Wizard
WAN connection speed - Please note that the wizard will automatically subtract 20% for the queues.
Download
The download speed of your WAN link in Kbits/second.
input
^[0-9]*$
Download speed must be numerical
ezshaper->step2->download
Upload
The upload speed of your WAN link in Kbits/second.
input
^[0-9]*$
Upload speed must be numerical
ezshaper->step2->upload
Next
submit
/* Magic shaper uses HFSC */
$config['system']['schedulertype'] = "hfsc";
/* Create queues */
/* WAN queues */
$queue = array();
$queue['name'] = "qWANRoot";
$queue['associatedrule'] = 0;
$queue['priority'] = 6;
$queue['parentqueue'] = "on";
$queue['bandwidth'] = (int)$_POST['upload'];
$queue['bandwidthtype'] = "Kb";
$config['shaper']['queue'][] = $queue;
$queue = array();
$queue['name'] = "qWANdef";
$queue['attachtoqueue'] = "qWANRoot";
$queue['associatedrule'] = 0;
$queue['defaultqueue'] = 'true';
$queue['priority'] = 3;
$queue['realtime'] = "on";
$queue['realtime1'] = "10%";
$queue['realtime2'] = "1";
$queue['realtime3'] = "10%";
$queue['linkshare'] = "on";
$queue['linkshare1'] = "0%";
$queue['linkshare2'] = "1000";
$queue['linkshare3'] = "10%";
$queue['upperlimit'] = "on";
$queue['upperlimit1'] = "100%";
$queue['upperlimit2'] = "100";
$queue['upperlimit3'] = "90%";
$queue['bandwidth'] = 1;
$queue['bandwidthtype'] = '%';
$config['shaper']['queue'][] = $queue;
/* LAN queue */
$queue = array();
$queue['name'] = "qLANRoot";
$queue['associatedrule'] = 0;
$queue['priority'] = 6;
$queue['parentqueue'] = "on";
$queue['bandwidth'] = (int)$_POST['download'];
$queue['bandwidthtype'] = "Kb";
$config['shaper']['queue'][] = $queue;
$queue = array();
$queue['name'] = "qLANdef";
$queue['priority'] = 3;
$queue['attachtoqueue'] = "qLANRoot";
$queue['associatedrule'] = 0;
$queue['defaultqueue'] = 'true';
$queue['realtime'] = "on";
$queue['realtime1'] = "10%";
$queue['realtime2'] = "1";
$queue['realtime3'] = "10%";
$queue['linkshare'] = "on";
$queue['linkshare1'] = "0%";
$queue['linkshare2'] = "1000";
$queue['linkshare3'] = "10%";
$queue['upperlimit'] = "on";
$queue['upperlimit1'] = "100%";
$queue['upperlimit2'] = "100";
$queue['upperlimit3'] = "90%";
$queue['bandwidth'] = 1;
$queue['bandwidthtype'] = '%';
$config['shaper']['queue'][] = $queue;
$queue = array();
$queue['name'] = "qLANacks";
$queue['ack'] = TRUE;
$queue['attachtoqueue'] = "qLANRoot";
$queue['associatedrule'] = 0;
$queue['priority'] = 6;
$queue['realtime'] = "on";
$queue['realtime1'] = "10%";
$queue['realtime2'] = "1";
$queue['realtime3'] = "10%";
$queue['linkshare'] = "on";
$queue['linkshare1'] = "0%";
$queue['linkshare2'] = "1000";
$queue['linkshare3'] = "10%";
$queue['upperlimit'] = "on";
$queue['upperlimit1'] = "80%";
$queue['upperlimit2'] = "1";
$queue['upperlimit3'] = "80%";
$queue['bandwidth'] = 1;
$queue['bandwidthtype'] = '%';
$config['shaper']['queue'][] = $queue;
$queue = array();
$queue['name'] = "qWANacks";
$queue['ack'] = TRUE;
$queue['attachtoqueue'] = "qWANRoot";
$queue['associatedrule'] = 0;
$queue['priority'] = 6;
$queue['realtime'] = "on";
$queue['realtime1'] = "10%";
$queue['realtime2'] = "1";
$queue['realtime3'] = "10%";
$queue['linkshare'] = "on";
$queue['linkshare1'] = "0%";
$queue['linkshare2'] = "1000";
$queue['linkshare3'] = "10%";
$queue['upperlimit'] = "on";
$queue['upperlimit1'] = "80%";
$queue['upperlimit2'] = "1";
$queue['upperlimit3'] = "80%";
$queue['bandwidth'] = 1;
$queue['bandwidthtype'] = '%';
$config['shaper']['queue'][] = $queue;
3
pfSense Traffic Shaper Wizard
Voice over IP
Enable
checkbox
Prioritize Voice over IP traffic
This will raise the priority of VOIP traffic above all other traffic.
ezshaper->step3->enable
Next
submit
VOIP specific settings
listtopic
Provider
select
Choose Generic if your provider isn't listed.
ezshaper->step3->provider
Bandwidth
select
Total bandwidth guarantee for VOIP phone(s)
128
ezshaper->step3->bandwidth
Next
submit
if ( $_POST['enable'] ) {
/* create qVOIPUp */
$queue = array();
$queue['name'] = "qVOIPUp";
$queue['associatedrule'] = 0;
$queue['priority'] = 7;
$queue['ecn'] = "on";
$queue['realtime'] = "on";
$queue['realtime1'] = $_POST['bandwidth'] . "Kb";
$queue['realtime2'] = "1";
$queue['realtime3'] = $_POST['bandwidth'] . "Kb";
$queue['linkshare'] = "on";
$queue['linkshare1'] = "0%";
$queue['linkshare2'] = "1000";
$queue['linkshare3'] = "10%";
$queue['upperlimit'] = "on";
$queue['upperlimit1'] = $_POST['bandwidth'] . "Kb";
$queue['upperlimit2'] = "1";
$queue['upperlimit3'] = $_POST['bandwidth'] . "Kb";
$queue['bandwidth'] = 1;
$queue['bandwidthtype'] = '%';
$queue['attachtoqueue'] = "qWANRoot";
$config['shaper']['queue'][] = $queue;
/* create qVOIPDown */
$queue = array();
$queue['name'] = "qVOIPDown";
$queue['associatedrule'] = 0;
$queue['priority'] = 7;
$queue['ecn'] = "on";
$queue['realtime'] = "on";
$queue['realtime1'] = $_POST['bandwidth'] . "Kb";
$queue['realtime2'] = "1";
$queue['realtime3'] = $_POST['bandwidth'] . "Kb";
$queue['linkshare'] = "on";
$queue['linkshare1'] = "0%";
$queue['linkshare2'] = "1000";
$queue['linkshare3'] = "10%";
$queue['upperlimit'] = "on";
$queue['upperlimit1'] = $_POST['bandwidth'] . "Kb";
$queue['upperlimit2'] = "1";
$queue['upperlimit3'] = $_POST['bandwidth'] . "Kb";
$queue['bandwidth'] = 1;
$queue['bandwidthtype'] = '%';
$queue['attachtoqueue'] = "qLANRoot";
$config['shaper']['queue'][] = $queue;
if( $_POST['provider'] == "Generic") {
/* create VOIP rules */
$rule = array();
$rule['descr'] = "DiffServ/Lowdelay/Upload";
$rule['inqueue'] = "qVOIPDown";
$rule['outqueue'] = "qVOIPUp";
$rule['interface'] = "lan";
$rule['source']['network'] = 'lan';
$rule['destination']['any'] = TRUE;
$rule['iptos'] = "lowdelay";
$config['shaper']['rule'][] = $rule;
$rule = array();
$rule['descr'] = "DiffServ/Lowdelay/Download";
$rule['inqueue'] = "qVOIPUp";
$rule['outqueue'] = "qVOIPDown";
$rule['interface'] = "wan";
$rule['source']['any'] = TRUE;
$rule['destination']['network'] = 'lan';
$rule['iptos'] = "lowdelay";
$config['shaper']['rule'][] = $rule;
} else {
$voiplist = array();
/* setup vonage rule */
if( $_POST['provider'] == "Vonage")
$voiplist[] = array('Vonage', 'udp', '5060', '5069', 'both');
/* asterisk server / same as vonage somewhat */
if( $_POST['provider'] == "Asterisk") {
$voiplist[] = array('Asterisk', 'udp', '5060', '5069', 'both');
$voiplist[] = array('Asterisk', 'udp', '10000', '17226', 'both');
}
/* VoicePulse server */
if( $_POST['provider'] == "VoicePulse") {
$voiplist[] = array('VoicePulse', 'udp', '16384', '16482', 'both');
$voiplist[] = array('VoicePulse', 'udp', '4569', '4569', 'both');
}
/* Panasonic Hybrid PBX */
if( $_POST['provider'] == "Panasonic") {
$voiplist[] = array('Panasonic1', 'udp', '8000-8063', '8000-8063', 'both');
$voiplist[] = array('Panasonic2', 'udp', '9300-9301', '9300-9301', 'both');
$voiplist[] = array('Panasonic3', 'udp', '2747', '2747', 'both');
}
/* Set up/down games as higher weight */
/* loop through voiplist[] */
foreach ($voiplist as $voip) {
foreach (array('source', 'destination') as $srcdest) {
$rule = array();
if ($srcdest == 'source') {
$destsrc = 'destination';
$rule['outqueue'] = 'qVOIPUp';
$rule['inqueue'] = 'qVOIPDown';
$rule['interface'] = 'lan';
$rule['source']['network'] = 'lan';
$rule['destination']['any'] = TRUE;
$rule['descr'] = "m_voip {$voip[0]} outbound";
} else {
$destsrc = 'source';
$rule['outqueue'] = 'qVOIPDown';
$rule['inqueue'] = 'qVOIPUp';
$rule['interface'] = 'wan';
$rule['source']['any'] = TRUE;
$rule['destination']['network'] = 'lan';
$rule['descr'] = "m_voip {$voip[0]} inbound";
}
$rule['destination']['port'] = $voip[2]."-".$voip[3];
if($voip[1] != '')
$rule['protocol'] = $voip[1];
$config['shaper']['rule'][] = $rule;
}
}
}
}
4
pfSense Traffic Shaper Wizard
Peer to Peer networking
true
true
Enable
checkbox
Prioritize Peer-to-Peer traffic
This will lower the priority of P2P traffic below all other traffic.
Aimster,BitTorrent,BuddyShare,CuteMX,DCplusplus,dcc,DirectConnect,DirectFileExpress,EDonkey2000,FastTrack,Gnutella,grouper,hotComm,HotlineConnect,iMesh,Napster,OpenNap,Scour,SongSpy,WinMX
ezshaper->step4->enable
Next
submit
Enable/Disable specific P2P protocols
listtopic
Aimster
checkbox
Aimster and other P2P using the Aimster protocol and ports
ezshaper->step4->aimster
BitTorrent
checkbox
Bittorrent and other P2P using the Torrent protocol and ports
ezshaper->step4->bittorrent
BuddyShare
checkbox
BuddyShare and other P2P using the BuddyShare protocol and ports
ezshaper->step4->buddyshare
CuteMX
checkbox
CuteMX and other P2P using the CuteMX protocol and ports
ezshaper->step4->cutemx
DCplusplus
checkbox
DC++ and other P2P using the DC++ protocol and ports
ezshaper->step4->dcplusplus
DCC
checkbox
irc DCC file transfers
ezshaper->step4->dcc
DirectConnect
checkbox
DirectConnect and other P2P using the DirectConnect protocol and ports
ezshaper->step4->directconnect
DirectFileExpress
checkbox
DirectFileExpress and other P2P using the DirectFileExpress protocol and ports
ezshaper->step4->directfileexpress
eDonkey2000
checkbox
eDonkey and other P2P using the eDonkey protocol and ports
ezshaper->step4->edonkey2000
FastTrack
checkbox
FastTrack and other P2P using the FastTrack protocol and ports
ezshaper->step4->fasttrack
Gnutella
checkbox
Gnutella and other P2P using the Gnutella protocol and ports
ezshaper->step4->gnutella
grouper
checkbox
grouper and other P2P using the grouper protocol and ports
ezshaper->step4->grouper
hotComm
checkbox
hotComm and other P2P using the hotComm protocol and ports
ezshaper->step4->hotcomm
HotlineConnect
checkbox
HotlineConnect and other P2P using the HotlineConnect protocol and ports
ezshaper->step4->hotlineconnect
iMesh
checkbox
iMest and other P2P using the iMest protocol and ports
ezshaper->step4->imesh
Napster
checkbox
Napster and other P2P using the Napster protocol and ports
ezshaper->step4->napster
OpenNap
checkbox
OpenNap and other P2P using the OpenNap protocol and ports
ezshaper->step4->opennap
Scour
checkbox
Scour and other P2P using the Scour protocol and ports
ezshaper->step4->scour
SongSpy
checkbox
SongSpy and other P2P using the SongSpy protocol and ports
ezshaper->step4->songspy
WinMX
checkbox
WinMX and other P2P using the WinMX protocol and ports
ezshaper->step4->winmx
Next
submit
if ( $_POST['enable'] ) {
$p2plist = array();
/* To add p2p clients, push Descr,Protocol,Start,End,src/dest/both onto p2plist */
if($_POST['aimster'] != "")
$p2plist[] = array('Aimster', 'tcp', '7668', '7668', 'both');
if($_POST['bittorrent'] != "")
$p2plist[] = array('BitTorrent', 'tcp', '6881', '6999', 'both');
if($_POST['buddyshare'] != "")
$p2plist[] = array('BuddyShare', 'tcp', '7788', '7788', 'both');
if($_POST['cutemx'] != "")
$p2plist[] = array('CuteMX', 'tcp', '2340', '2340', 'both');
if($_POST['dc++'] != "")
$p2plist[] = array('DC++', 'tcp', '1412', '1412', 'both');
if($_POST['dcc'] != "")
$p2plist[] = array('dcc', 'tcp', '6666', '6668', 'both');
if($_POST['directconnect'] != "")
$p2plist[] = array('DirectConnect', 'tcp', '412', '412', 'both');
if($_POST['directfileexpress'] != "")
$p2plist[] = array('DirectFileExpress', 'tcp', '1044', '1045', 'both');
if($_POST['edonkey2000'] != "")
$p2plist[] = array('EDonkey2000', 'tcp', '4661', '4665', 'both');
if($_POST['fastTrack'] != "")
$p2plist[] = array('FastTrack', 'tcp', '1214', '1214', 'both');
if($_POST['gnutella'] != "")
$p2plist[] = array('Gnutella', 'tcp', '6346', '6346', 'both');
if($_POST['grouper'] != "")
$p2plist[] = array('grouper', 'tcp', '8038', '8039', 'both');
if($_POST['hotcomm'] != "")
$p2plist[] = array('hotComm', 'tcp', '28864', '28865', 'both');
if($_POST['hotlineconnect'] != "")
$p2plist[] = array('HotlineConnect', 'tcp', '5500', '5503', 'both');
if($_POST['imesh'] != "")
$p2plist[] = array('iMesh', 'tcp', '4329', '4329', 'both');
if($_POST['napster'] != "")
$p2plist[] = array('Napster', 'tcp', '6699', '6701', 'both');
if($_POST['opennap'] != "")
$p2plist[] = array('OpenNap', 'tcp', '8888', '8889', 'both');
if($_POST['scour'] != "")
$p2plist[] = array('Scour', 'tcp', '8311', '8311', 'both');
if($_POST['songspy'] != "")
$p2plist[] = array('SongSpy', 'tcp', '5190', '5190', 'both');
if($_POST['winmx'] != "")
$p2plist[] = array('WinMX', 'tcp', '6699', '6699', 'both');
/* Set up/down p2p as lowest weight */
/* loop through p2plist[] */
foreach ($p2plist as $p2pclient) {
foreach (array('source', 'destination') as $srcdest) {
$rule = array();
if ($srcdest == 'source') {
$destsrc = 'destination';
$rule['outqueue'] = 'qP2PUp';
$rule['inqueue'] = 'qP2PDown';
$rule['interface'] = 'lan';
$rule['source']['network'] = 'lan';
$rule['destination']['any'] = TRUE;
$rule['descr'] = "m_P2P {$p2pclient[0]} outbound";
} else {
$destsrc = 'source';
$rule['outqueue'] = 'qP2PDown';
$rule['inqueue'] = 'qP2PUp';
$rule['interface'] = 'wan';
$rule['source']['any'] = TRUE;
$rule['destination']['network'] = 'lan';
$rule['descr'] = "m_P2P {$p2pclient[0]} inbound";
}
$rule['destination']['port'] = $p2pclient[2]."-".$p2pclient[3];
if($p2pclient[1] != '')
$rule['protocol'] = $p2pclient[1];
$config['shaper']['rule'][] = $rule;
}
}
/* create qP2PUp */
$queue = array();
$queue['name'] = "qP2PUp";
$queue['associatedrule'] = 0;
$queue['priority'] = 0;
$queue['red'] = "on";
$queue['ecn'] = "on";
$queue['realtime'] = "on";
$queue['realtime1'] = "1Kb";
$queue['realtime2'] = "10";
$queue['realtime3'] = "1Kb";
$queue['linkshare'] = "on";
$queue['linkshare1'] = "0%";
$queue['linkshare2'] = "1000";
$queue['linkshare3'] = "10%";
$queue['upperlimit'] = "on";
$queue['upperlimit1'] = "100%";
$queue['upperlimit2'] = "100";
$queue['upperlimit3'] = "90%";
$queue['bandwidth'] = 1;
$queue['bandwidthtype'] = '%';
$queue['attachtoqueue'] = "qWANRoot";
$config['shaper']['queue'][] = $queue;
/* create qP2PDown */
$queue = array();
$queue['name'] = "qP2PDown";
$queue['associatedrule'] = 0;
$queue['priority'] = 0;
$queue['red'] = "on";
$queue['ecn'] = "on";
$queue['realtime'] = "on";
$queue['realtime1'] = "1Kb";
$queue['realtime2'] = "1";
$queue['realtime3'] = "1Kb";
$queue['linkshare'] = "on";
$queue['linkshare1'] = "0%";
$queue['linkshare2'] = "1000";
$queue['linkshare3'] = "10%";
$queue['upperlimit'] = "on";
$queue['upperlimit1'] = "100%";
$queue['upperlimit2'] = "100";
$queue['upperlimit3'] = "90%";
$queue['bandwidth'] = 1;
$queue['bandwidthtype'] = '%';
$queue['attachtoqueue'] = "qLANRoot";
$config['shaper']['queue'][] = $queue;
}
5
pfSense Traffic Shaper Wizard
true
Network Games
Enable
checkbox
Prioritize network gaming traffic
This will raise the priority of gaming traffic to higher than most traffic.
Counterstrike,DeltaForce,QuakeIII,TigerWoods2004PS2,CallOfDuty,PlanetSide,Halo2,Unreal
true
ezshaper->step5->enable
Next
submit
Enable/Disable specific games
listtopic
Counterstrike
checkbox
Counterstrike. The ultimate 1st person shooter.
ezshaper->step5->counterstrike
DeltaForce
checkbox
Delta Force
ezshaper->step5->deltaforce
QuakeIII
checkbox
Quake III
ezshaper->step5->quakeiii
TigerWoods2004PS2
checkbox
Tiger Woods 2004 for PS2
ezshaper->step5->tigerwoods2004ps2
CallOfDuty
checkbox
Call Of Duty (United Offensive)
ezshaper->step5->callofduty
PlanetSide
checkbox
PlanetSide
ezshaper->step5->planetside
Halo2
checkbox
Halo2 via Xbox live
ezshaper->step5->halo2xbox
Unreal
checkbox
Unreal tournament
ezshaper->step5->unreal
Next
submit
if ( $_POST['enable'] ) {
/* create qGamesUp queue */
$queue = array();
$queue['name'] = "qGamesUp";
$queue['associatedrule'] = 0;
$queue['priority'] = 5;
$queue['red'] = "on";
$queue['ecn'] = "on";
$queue['realtime'] = "on";
$queue['realtime1'] = "1Kb";
$queue['realtime2'] = "1";
$queue['realtime3'] = "1Kb";
$queue['linkshare'] = "on";
$queue['linkshare1'] = "0%";
$queue['linkshare2'] = "1000";
$queue['linkshare3'] = "10%";
$queue['upperlimit'] = "on";
$queue['upperlimit1'] = "100%";
$queue['upperlimit2'] = "100";
$queue['upperlimit3'] = "90%";
$queue['bandwidth'] = 1;
$queue['bandwidthtype'] = '%';
$queue['attachtoqueue'] = "qWANRoot";
$config['shaper']['queue'][] = $queue;
/* create qGamesDown queue */
$queue = array();
$queue['name'] = "qGamesDown";
$queue['associatedrule'] = 0;
$queue['priority'] = 5;
$queue['red'] = "on";
$queue['ecn'] = "on";
$queue['realtime'] = "on";
$queue['realtime1'] = "1Kb";
$queue['realtime2'] = "1";
$queue['realtime3'] = "1Kb";
$queue['linkshare'] = "on";
$queue['linkshare1'] = "0%";
$queue['linkshare2'] = "1000";
$queue['linkshare3'] = "10%";
$queue['upperlimit'] = "on";
$queue['upperlimit1'] = "100%";
$queue['upperlimit2'] = "100";
$queue['upperlimit3'] = "90%";
$queue['bandwidth'] = 1;
$queue['bandwidthtype'] = '%';
$queue['attachtoqueue'] = "qLANRoot";
$config['shaper']['queue'][] = $queue;
$gamesplist = array();
if($_POST['counterstrike'] != "") {
/* counter strike */
$gamesplist[] = array('Titan', 'udp', '6003', '6003', 'both');
$gamesplist[] = array('Authentication', 'udp', '7002', '7002', 'both');
$gamesplist[] = array('Client', 'udp', '6003', '6003', 'both');
$gamesplist[] = array('Masterserver', 'udp', '27010', '27010', 'both');
$gamesplist[] = array('Mod-Server', 'udp', '27011', '27011', 'both');
$gamesplist[] = array('Chat', 'udp', '27012', '27012', 'both');
$gamesplist[] = array('HL-Serverport ', 'udp', '27015', '27015', 'both');
}
if($_POST['deltaforce'] != "") {
/* delta force */
$gamesplist[] = array('Delta1', 'udp', '17478', '17488', 'both');
}
if($_POST['quakeiii'] != "") {
/* quake3 */
$gamesplist[] = array('Delta1', 'udp', '27910', '27919', 'both');
}
if($_POST['tigerwoods2004ps2'] != "") {
/* tiger woods 2004 ps2 */
$gamesplist[] = array('Outbound2Player', 'udp', '3658', '3658', 'both');
$gamesplist[] = array('Outbound2Player2', 'udp', '6000', '6000', 'both');
$gamesplist[] = array('Outbound2EA', 'tcp', '10300', '10301', 'both');
}
if($_POST['callofduty'] != "") {
$gamesplist[] = array('CallOfDuty1', 'tcp', '28960', '28960', 'both');
$gamesplist[] = array('CallOfDuty2', 'udp', '28960', '28960', 'both');
}
if($_POST['planetside'] != "") {
/* PlanetSide */
$gamesplist[] = array('PlanetSide', 'tcp', '7000', '7000', 'both');
$gamesplist[] = array('PlanetSide', 'tcp', '7080', '7080', 'both');
$gamesplist[] = array('PlanetSide2', 'udp', '3016', '3021', 'both');
$gamesplist[] = array('PlanetSide2', 'udp', '45000', '45010', 'both');
$gamesplist[] = array('PlanetSide2', 'udp', '30000', '30500', 'both');
}
if($_POST['halo2'] != "") {
/* Halo2 + XBOX Live */
$gamesplist[] = array('Halo2-1', 'udp', '88', '88', 'both');
$gamesplist[] = array('Halo2-2', 'udp', '3074', '3074', 'both');
$gamesplist[] = array('Halo2-3', 'tcp', '3074', '3074', 'both');
}
if($_POST['unreal'] != "") {
/* Unreal Tournament */
$gamesplist[] = array('ur1', 'udp', '7777-7787', '7777-7787', 'both');
$gamesplist[] = array('ur2', 'tcp', '7777-7787', '7777-7787', 'both');
}
/* Set up/down games as higher weight */
/* loop through p2plist[] */
foreach ($gamesplist as $Gameclient) {
foreach (array('source', 'destination') as $srcdest) {
$rule = array();
if ($srcdest == 'source') {
$destsrc = 'destination';
$rule['outqueue'] = 'qGamesUp';
$rule['inqueue'] = 'qGamesDown';
$rule['interface'] = 'lan';
$rule['source']['network'] = 'lan';
$rule['destination']['any'] = TRUE;
$rule['descr'] = "m_Game {$Gameclient[0]} outbound";
} else {
$destsrc = 'source';
$rule['outqueue'] = 'qGamesDown';
$rule['inqueue'] = 'qGamesUp';
$rule['interface'] = 'wan';
$rule['source']['any'] = TRUE;
$rule['destination']['network'] = 'lan';
$rule['descr'] = "m_Game {$Gameclient[0]} inbound";
}
$rule['destination']['port'] = $Gameclient[2]."-".$Gameclient[3];
if($Gameclient[1] != '')
$rule['protocol'] = $Gameclient[1];
$config['shaper']['rule'][] = $rule;
}
}
}
6
pfSense Traffic Shaper Wizard
true
Raise or lower other Applications
Enable
checkbox
Other networking protocols
This will help raise or lower the priority of other protocols higher than most traffic.
MSRDP,PPTP,IPSEC,StreamingMP3,IRC,DNS,HTTP,SMTP,POP3,ICMP,IMAP,SMB,RTSP,SNMP,VNC
true
ezshaper->step6->enable
Next
submit
Enable/Disable other protocols
listtopic
MSRDP
select
ezshaper->step6->msrdp
Microsoft Remote Desktop Protocol
PPTP
select
ezshaper->step6->pptp
Microsoft Point to Point tunneling protocol
IPSEC
select
ezshaper->step6->ipsec
IPSEC VPN traffic
StreamingMP3
select
ezshaper->step6->streamingmp3
Streaming Media
IRC
select
ezshaper->step6->irc
Internet Relay Chat
DNS
select
ezshaper->step6->dns
Domain Name Services
HTTP
select
ezshaper->step6->http
HTTP and HTTPS aka Web Traffic
SMTP
select
ezshaper->step6->smtp
Mail Protocol
POP3
select
ezshaper->step6->pop3
POP3 Protocol
ICMP
ezshaper->step6->icmp
select
ICMP Protocol
IMAP
ezshaper->step6->imap
select
IMAP Protocol
SMB
ezshaper->step6->smb
select
Microsoft SMB Protocol and friends
RTSP
ezshaper->step6->rtsp
select
RealTime streaming protocol
SNMP
ezshaper->step6->snmp
select
Simple Network Management Protocol
VNC
ezshaper->step6->vnc
select
Virtual Network Computing
Next
submit
if ( $_POST['enable'] ) {
/* create qOthersUp queue */
$queue = array();
$queue['name'] = "qOthersUpH";
$queue['associatedrule'] = 0;
$queue['priority'] = 4;
$queue['red'] = "on";
$queue['ecn'] = "on";
$queue['realtime'] = "on";
$queue['realtime1'] = "1Kb";
$queue['realtime2'] = "1";
$queue['realtime3'] = "1Kb";
$queue['linkshare'] = "on";
$queue['linkshare1'] = "0%";
$queue['linkshare2'] = "1000";
$queue['linkshare3'] = "10%";
$queue['upperlimit'] = "on";
$queue['upperlimit1'] = "100%";
$queue['upperlimit2'] = "100";
$queue['upperlimit3'] = "90%";
$queue['bandwidth'] = 1;
$queue['bandwidthtype'] = '%';
$queue['attachtoqueue'] = "qWANRoot";
$config['shaper']['queue'][] = $queue;
/* create qOthersDown queue */
$queue = array();
$queue['name'] = "qOthersDownH";
$queue['associatedrule'] = 0;
$queue['priority'] = 4;
$queue['red'] = "on";
$queue['ecn'] = "on";
$queue['realtime'] = "on";
$queue['realtime1'] = "1Kb";
$queue['realtime2'] = "1";
$queue['realtime3'] = "1Kb";
$queue['linkshare'] = "on";
$queue['linkshare1'] = "0%";
$queue['linkshare2'] = "1000";
$queue['linkshare3'] = "10%";
$queue['upperlimit'] = "on";
$queue['upperlimit1'] = "100%";
$queue['upperlimit2'] = "100";
$queue['upperlimit3'] = "90%";
$queue['bandwidth'] = 1;
$queue['bandwidthtype'] = '%';
$queue['attachtoqueue'] = "qLANRoot";
$config['shaper']['queue'][] = $queue;
/* create qOthersUp queue */
$queue = array();
$queue['name'] = "qOthersUpL";
$queue['associatedrule'] = 0;
$queue['priority'] = 2;
$queue['red'] = "on";
$queue['ecn'] = "on";
$queue['realtime'] = "on";
$queue['realtime1'] = "1Kb";
$queue['realtime2'] = "1";
$queue['realtime3'] = "1Kb";
$queue['linkshare'] = "on";
$queue['linkshare1'] = "0%";
$queue['linkshare2'] = "1000";
$queue['linkshare3'] = "10%";
$queue['upperlimit'] = "on";
$queue['upperlimit1'] = "100%";
$queue['upperlimit2'] = "100";
$queue['upperlimit3'] = "90%";
$queue['bandwidth'] = 1;
$queue['bandwidthtype'] = '%';
$queue['attachtoqueue'] = "qWANRoot";
$config['shaper']['queue'][] = $queue;
/* create qOthersDown queue */
$queue = array();
$queue['name'] = "qOthersDownL";
$queue['associatedrule'] = 0;
$queue['priority'] = 2;
$queue['red'] = "on";
$queue['ecn'] = "on";
$queue['realtime'] = "on";
$queue['realtime1'] = "1Kb";
$queue['realtime2'] = "1";
$queue['realtime3'] = "1Kb";
$queue['linkshare'] = "on";
$queue['linkshare1'] = "0%";
$queue['linkshare2'] = "1000";
$queue['linkshare3'] = "10%";
$queue['upperlimit'] = "on";
$queue['upperlimit1'] = "100%";
$queue['upperlimit2'] = "100";
$queue['upperlimit3'] = "90%";
$queue['bandwidth'] = 1;
$queue['bandwidthtype'] = '%';
$queue['attachtoqueue'] = "qLANRoot";
$config['shaper']['queue'][] = $queue;
$othersplist = array();
/* Unlike other areas we are posting the queue H or L or BLANK */
if($_POST['msrdp'] != "") {
/* MSRDP */
$othersplist[] = array('MSRDP', 'tcp', '3389', '3389', 'both', $_POST['msrdp']);
}
if($_POST['pptp'] != "") {
/* PPTP */
$othersplist[] = array('PPTP', 'tcp', '1723', '1723', 'both', $_POST['pptp']);
$othersplist[] = array('PPTPGRE', 'gre', '', '', 'both', $_POST['pptp']);
}
if($_POST['ipsec'] != "") {
/* IPSEC */
$othersplist[] = array('IPSEC', 'udp', '500', '500', 'both', $_POST['ipsec']);
$othersplist[] = array('IPSEC', 'ah', '', '', 'both', $_POST['ipsec']);
$othersplist[] = array('IPSEC', 'esp', '', '', 'both', $_POST['ipsec']);
}
if($_POST['streamingmp3'] != "") {
/* streaming mp3 media aka shoutcast */
$othersplist[] = array('STREAMINGMP3', 'tcp', '8000', '8100', 'both', $_POST['streamingmp3']);
}
if($_POST['irc'] != "") {
/* internet relay chat */
$othersplist[] = array('IRC', 'tcp', '6667', '6670', 'both', $_POST['irc']);
}
if($_POST['dns'] != "") {
/* domain name system */
$othersplist[] = array('DNS1', 'tcp', '53', '53', 'both', $_POST['dns']);
$othersplist[] = array('DNS2', 'udp', '53', '53', 'both', $_POST['dns']);
}
if($_POST['http'] != "") {
/* HTTP aka Web Traffic */
$othersplist[] = array('HTTP', 'tcp', '80', '80', 'both', $_POST['http']);
$othersplist[] = array('HTTPS', 'tcp', '443', '443', 'both', $_POST['http']);
}
if($_POST['smtp'] != "") {
/* Secure shell traffic */
$othersplist[] = array('SMTP', 'tcp', '25', '25', 'both', $_POST['smtp']);
}
if($_POST['pop3'] != "") {
/* Post Office Protocol - POP3 */
$othersplist[] = array('POP3', 'tcp', '110', '110', 'both', $_POST['pop3']);
}
if($_POST['icmp'] != "") {
/* ICMP */
$othersplist[] = array('ICMP', 'icmp', '', '', 'both', $_POST['icmp']);
}
if($_POST['imap'] != "") {
/* IMAP */
$othersplist[] = array('IMAP', 'tcp', '143', '143', 'both', $_POST['imap']);
}
if($_POST['smb'] != "") {
/* Microsoft SMB and friends */
$othersplist[] = array('SMB1', 'tcp', '445', '445', 'both', $_POST['smb']);
$othersplist[] = array('SMB2', 'tcp', '137-139', '137-139', 'both', $_POST['smb']);
if($_POST['rtsp'] != "") {
/* realtime streaming protocol */
$othersplist[] = array('RTSP1', 'tcp', '554', '554', 'both', $_POST['rtsp']);
} }
if($_POST['snmp'] != "") {
/* Simple network management protocol */
$othersplist[] = array('SNMP', 'tcp', '161', '161', 'both', $_POST['snmp']);
$othersplist[] = array('SNMP2', 'udp', '161', '161', 'both', $_POST['snmp']);
}
if($_POST['vnc'] != "") {
/* Simple network management protocol */
$othersplist[] = array('VNC', 'tcp', '5900-5930', '5900-5930', 'both', $_POST['vnc']);
}
/* Set up/down protocols as higher weight */
/* loop through othersplist[] */
foreach ($othersplist as $otherclient) {
foreach (array('source', 'destination') as $srcdest) {
$rule = array();
if ($srcdest == 'source') {
$destsrc = 'destination';
$rule['outqueue'] = 'qOthersUp' . $otherclient[5]; /* posted value H or L */
$rule['inqueue'] = 'qOthersDown' . $otherclient[5]; /* posted value H or L */
$rule['interface'] = 'lan';
$rule['source']['network'] = 'lan';
$rule['destination']['any'] = TRUE;
$rule['descr'] = "m_Other {$otherclient[0]} outbound";
} else {
$destsrc = 'source';
$rule['outqueue'] = 'qOthersDown' . $otherclient[5]; /* posted value H or L */
$rule['inqueue'] = 'qOthersUp' . $otherclient[5]; /* posted value H or L */
$rule['interface'] = 'wan';
$rule['source']['any'] = TRUE;
$rule['destination']['network'] = 'lan';
$rule['descr'] = "m_Other {$otherclient[0]} inbound";
}
$rule['destination']['port'] = $otherclient[2]."-".$otherclient[3];
if($otherclient[1] != '')
$rule['protocol'] = $otherclient[1];
$config['shaper']['rule'][] = $rule;
}
}
}
7
pfSense Traffic Shaper Wizard
After pressing Finish the system will load the new profile.
Finish
submit
$config['shaper']['enable'] = TRUE;
filter_configure_sync();
header("Location: /status_queues.php");