P Philippe Mar 11, 2011 #1 Hello, I use FreeBSD 7.0 I'd like to know if it's possible to differentiate flows SSH and SFTP with PF (no with ALTQ). Thank! Philippe
Hello, I use FreeBSD 7.0 I'd like to know if it's possible to differentiate flows SSH and SFTP with PF (no with ALTQ). Thank! Philippe
SirDice Administrator Staff member Administrator Moderator Mar 11, 2011 #2 Nope, both go over port 22.
SirDice Administrator Staff member Administrator Moderator Mar 11, 2011 #4 The same for both as both use the SSH protocol. Since you can't look inside you can't tell the difference.
The same for both as both use the SSH protocol. Since you can't look inside you can't tell the difference.
OP P Philippe Mar 11, 2011 Thread Starter #5 Not possible to filter the bit ToS​​?... No other way?
DutchDaemon Administrator Staff member Administrator Moderator Developer Mar 11, 2011 #6 Should we just set up an auto-responder that posts 'no' to this question? Only ALTQ has a way to differentiate between the two because of traffic utilisation: pf.conf(5) Interactive ssh(1) sessions get priority over bulk transfers like scp(1) and sftp(1). The queues may then be referenced by filtering rules. Code: queue ssh bandwidth 20% cbq(borrow) { ssh_interactive, ssh_bulk } queue ssh_interactive bandwidth 50% priority 7 cbq(borrow) queue ssh_bulk bandwidth 50% priority 0 cbq(borrow) Click to expand...
Should we just set up an auto-responder that posts 'no' to this question? Only ALTQ has a way to differentiate between the two because of traffic utilisation: pf.conf(5) Interactive ssh(1) sessions get priority over bulk transfers like scp(1) and sftp(1). The queues may then be referenced by filtering rules. Code: queue ssh bandwidth 20% cbq(borrow) { ssh_interactive, ssh_bulk } queue ssh_interactive bandwidth 50% priority 7 cbq(borrow) queue ssh_bulk bandwidth 50% priority 0 cbq(borrow) Click to expand...
OP P Philippe Mar 11, 2011 Thread Starter #7 "Should we just set up an auto-responder that posts 'no' to this question?" => No comment I thought maybe someone had found a tip for my problem. I knew for ALTQ. Thank you for your answers!
"Should we just set up an auto-responder that posts 'no' to this question?" => No comment I thought maybe someone had found a tip for my problem. I knew for ALTQ. Thank you for your answers!
